Main Content

Configure Dashboard Access Control UsingGoogleIdentity

MATLAB®Production Server™administrators can use Google®identity provider to configure role-based access control for theMATLAB生产服务器Dashboard. Role-based access control allows administrators to grant access to specific areas of the dashboard to certain users or groups of users. For more information about the roles that the dashboard supports, seeDashboard Access Control.

To enable dashboard access control, configure the identity provider and specify access control policies, in consultation with the Google Identity administrator.

ConfigureGoogleIdentity

To configure Google Identity:

  1. Log in to the dashboard to retrieve the redirect URI of the dashboard.

  2. On the Google Cloud Platform Console, use the redirect URI to register the dashboard as a client application with the provider.

  3. In the dashboard, enter values specific to the registered application and Google Identity.

Retrieve Redirect URI from Dashboard

To retrieve the redirect URI, start creating a configuration for Google Identity in the dashboard:

  1. Navigate to either theDashboard Access Controltab or theManage Identity Providerstab.

  2. ClickCreateand selectGoogle.

  3. InCreate Identity Provider for Dashboard Access Control, note the redirect URI of the dashboard.

    Later, you return to this view to specify the values required to configure your identify provider in the dashboard.

Register Application inGoogleCloud Console

Use the Google Cloud Console to register a web client application for dashboard access control. Use the redirect URI from theMATLAB生产服务器Dashboard when registering the application.

  1. Sign in to theGoogle Cloud Platform Consoleand navigate to theCredentialspage.

  2. On theCredentialspage, clickCreate credentialsand selectOAuth client ID.

  3. FromApplication typedrop down, selectWeb Application.

  4. Enter the name of you client application (for example,MATLAB生产服务器Dashboard App).

  5. Under授权重定向uri, clickAdd URI.

  6. Copy the redirect URI fromMATLAB生产服务器Dashboard and paste it into theURIsfield in the Google Cloud Console.

  7. ClickCreate.

  8. The Google identity provider creates an application with a client ID and client secret. Note the values of the client ID and client secret. You enter these values next in the dashboard.

Specify Client ID and Client Secret in Dashboard

  1. Enter the noted client ID and client secret values from the previous section in theClient IDandClient Secretfields respectively inMATLAB生产服务器dashboard.

  2. ClickCreateto complete the configuration of the identity provider.

Specify Dashboard Access Control Policy

Before you can specify dashboard access control policies, you must have users, and groups, if applicable, set up in Google. Consult the Google identity provider administrator for this setup.

The access control policies define areas of the dashboard that users can access and tasks that they can perform in these areas. Use the policies to assign the manager and application author roles to users in your organization by entering their Google user names.

  1. On theDashboard Access Controltab of the dashboard, select Google as the identity provider.

  2. In theDashboard Access Control Policysection, enter Google user names to assign manager and application author roles to users in your organization. ClickSaveafter you enter the values.

Enable Dashboard Access Control

After you configure Google Identity and specify access control policies, you must enable dashboard access control by selecting theYesoption. After enabling dashboard access control, a dashboard login URL that supports single sign-on (SSO) becomes available. Share this URL with managers and application authors.

Dashboard Access Control tab showing the access enabled and the URL to share

Related Topics