Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.nebius.com/llms.txt

Use this file to discover all available pages before exploring further.

A federation connects your identity provider (IdP) to Nebius AI Cloud, allowing users from your organization to log in with single sign-on (SSO). In the web console, you can create, activate and deactivate federations, change their settings, and upload or delete attached certificates.

​
Prerequisites

  1. Make sure you are in a group that has the admin role within your tenant; for example, the default admins group. You can check this in the Administration → IAM section of the web console.
  2. Make sure that you have access to your IdP admin portal and can get your SAML application metadata (login URL, identifier, certificate) required to create a federation.

​
Creating a federation

To create a new federation:
  1. In the sidebar, go to https://mintcdn.com/nebius-ai-cloud/1Ha0sWR6e1mnIaHS/_assets/sidebar/administration.svg?fit=max&auto=format&n=1Ha0sWR6e1mnIaHS&q=85&s=e6411dc023fd6972922c0a12a59ccf21 Administration → IAM.
  2. Go to the Federations tab.
  3. Click Create entity → Federation.
  4. Specify the IdP settings:
    • If you have an XML file with SAML metadata:
      1. Enter a federation name.
      2. Click Upload file and select the XML file with SAML metadata from your IdP, then click Continue.
      3. On the page that opens, enter a name for the certificate in the Certificates section.
    • If you don’t have an XML file, enter the SAML metadata manually:
      1. Enable Manual mode and enter a federation name.
      2. Under Identity provider (IdP), specify the SSO URL and Issuer parameters from your IdP, then click Continue.
      3. On the page that opens, enter a certificate name, then either upload the PEM certificate file or copy and paste the certificate body into the field.
  5. Click Create federation.

​
Changing federation settings

  1. In the sidebar, go to https://mintcdn.com/nebius-ai-cloud/1Ha0sWR6e1mnIaHS/_assets/sidebar/administration.svg?fit=max&auto=format&n=1Ha0sWR6e1mnIaHS&q=85&s=e6411dc023fd6972922c0a12a59ccf21 Administration → IAM.
  2. Go to the Federations tab.
  3. Next to the federation, click https://mintcdn.com/nebius-ai-cloud/1Ha0sWR6e1mnIaHS/_assets/button-vellipsis.svg?fit=max&auto=format&n=1Ha0sWR6e1mnIaHS&q=85&s=e80b8e57c43bfd117679262e6a1334ad → Configure.
  4. Update federation settings:
    • Name: Federation name.
    • SSO URL: Login URL from your IdP.
    • Issuer: Your IdP identifier string.
  5. Click Save changes to apply the new settings.

​
Changing federation certificates

  1. In the sidebar, go to https://mintcdn.com/nebius-ai-cloud/1Ha0sWR6e1mnIaHS/_assets/sidebar/administration.svg?fit=max&auto=format&n=1Ha0sWR6e1mnIaHS&q=85&s=e6411dc023fd6972922c0a12a59ccf21 Administration → IAM.
  2. Go to the Federations tab and open the federation whose certificate you want to change.
  3. On the Certificates tab, rename or delete a certificate.
    A federation cannot function correctly without at least one valid certificate. If you need to delete the only certificate attached to the federation, be sure to replace it with a new one.
  4. To add a new certificate:
    1. Click Attach certificate.
    2. Enter a certificate name, then either upload the PEM certificate file or copy and paste the certificate body into the field.
    3. Click Attach certificates.

​
Deactivating a federation

When a federation is inactive, users who authenticate through that federation will not be able to sign in to Nebius AI Cloud until it’s reactivated.
  1. In the sidebar, go to https://mintcdn.com/nebius-ai-cloud/1Ha0sWR6e1mnIaHS/_assets/sidebar/administration.svg?fit=max&auto=format&n=1Ha0sWR6e1mnIaHS&q=85&s=e6411dc023fd6972922c0a12a59ccf21 Administration → IAM.
  2. Go to the Federations tab.
  3. Next to the federation you want to deactivate, click https://mintcdn.com/nebius-ai-cloud/1Ha0sWR6e1mnIaHS/_assets/button-vellipsis.svg?fit=max&auto=format&n=1Ha0sWR6e1mnIaHS&q=85&s=e80b8e57c43bfd117679262e6a1334ad → Deactivate. To reactivate the federation, click https://mintcdn.com/nebius-ai-cloud/1Ha0sWR6e1mnIaHS/_assets/button-vellipsis.svg?fit=max&auto=format&n=1Ha0sWR6e1mnIaHS&q=85&s=e80b8e57c43bfd117679262e6a1334ad →  Activate.