Identity and organization

Identity providers

• Active Directory over LDAP: name, domain, LDAP URL, bind DN, bind password and base DN. Test & Connect runs a live bind and names the exact problem: server unreachable, bind failed or search failed.
• Microsoft Entra ID: tenant ID, client ID and client secret. The app registration needs the Group.Read.All and User.Read.All Graph permissions.
• Provider cards show status, domain, synced users and groups, and the last sync. Secrets are stored encrypted.
• Managing providers needs identity.manage.

Sync and group mappings

• Sync now imports users and groups from AD providers and shows a log of each step.
• A group mapping links a directory group to a portal group. Members then get that portal group's project grants automatically.
• Sign-in is checked against the directory; the portal stores no passwords for directory users.
• Deleting a provider stops sign-in and sync for its users.

Organization settings

The Organization page (org.settings) holds the organization's name and slug and shows its plan.

Cost pricing

• Set prices per vCPU hour, per GB of RAM per hour and per GB of storage per month, in EUR, USD, GBP or CHF (org.pricing).
• Running VMs are counted with compute and storage, stopped VMs with storage only.
• The resulting estimates appear on the Usage page for people with usage.costs.

Outgoing mail (SMTP)

• Configure the mail server and encryption on the Organization page. The password is stored encrypted and never sent to the browser.
• Mail is sent in addition to in-portal notifications, for example for lease-rule stages that notify the owner.

Features on this page

• Directory sign-in
• Directory group mappings
• Outgoing mail
• Directory integration