Disabling identity federation

If you configured an identity federation service for this tenant, you can temporarily or permanently disable identity federation for tenant groups and users. When identity federation is disabled, there is no communication between the StorageGRID system and the identity source. However, any settings you have configured are retained, allowing you to easily re-enable identity federation in the future.

Before you begin

You must be signed in to the Tenant Manager using a supported browser.
You must have specific access permissions.

About this task

Before you disable identity federation, you should be aware of the following:

Federated users will be unable to sign in.
Federated users who are currently signed in will retain access to the tenant account until their session expires, but they will be unable to sign in after their session expires.
Synchronization between the StorageGRID system and the identity source will not occur.

Procedure

Select Access Control > Identity Federation.
Deselect the Enable Identity Federation check box.
Click Save.