{"id":15385,"date":"2024-01-02T00:35:12","date_gmt":"2024-01-02T08:35:12","guid":{"rendered":"https:\/\/www.pingcap.com\/?p=15385"},"modified":"2025-08-19T04:10:00","modified_gmt":"2025-08-19T11:10:00","slug":"announcing-organization-sso-authentication-tidb-cloud","status":"publish","type":"post","link":"https:\/\/www.pingcap.com\/ko\/blog\/announcing-organization-sso-authentication-tidb-cloud\/","title":{"rendered":"Announcing Organization SSO Authentication in TiDB Cloud"},"content":{"rendered":"<p>We are thrilled to introduce a significant enhancement to TiDB Cloud&#8217;s security features: <a href=\"https:\/\/docs.pingcap.com\/tidbcloud\/tidb-cloud-org-sso-authentication\">Organization Single-Sign-On (SSO) Authentication<\/a>. This new feature streamlines enterprise authentication processes, enabling seamless integration with any Identity Provider (IdP) using <a href=\"https:\/\/en.wikipedia.org\/wiki\/Security_Assertion_Markup_Language\">Security Assertion Markup Language (SAML)<\/a> \ub610\ub294 <a href=\"https:\/\/openid.net\/developers\/how-connect-works\/\">OpenID Connect (OIDC)<\/a>.<\/p>\n\n\n\n<p>Enterprise authentication is crucial to securing access to resources and data within <a href=\"https:\/\/www.pingcap.com\/ko\/tidb\/\">TiDB Cloud<\/a>, a fully-managed Database-as-a-service (DBaaS) offering of <a href=\"https:\/\/www.pingcap.com\/ko\/tidb\/\">\ud2f0DB<\/a>. With Organization SSO, customers can expect centralized user management, enhanced security, improved experience on user onboarding, and better control over access policies.\u00a0<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Why_Did_We_Build_Organization_SSO\"><\/span><strong>Why Did We Build Organization SSO?<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>It boils down to the core needs of our enterprise customers during their security and compliance evaluation. A frequent yet important question enterprise IT admins ask is: Can their existing Identity Providers (IdPs) like Okta or Microsoft Azure AD&nbsp; manage user authentication in TiDB Cloud?<\/p>\n\n\n\n<p>This question can then be unpacked into several more leading questions:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Protocol compatibility<\/strong>: Does TiDB Cloud support widely-used authentication protocols such as SAML or OIDC for connecting with enterprise IdPs?<\/li>\n\n\n\n<li><strong>Simplified user onboarding<\/strong>: Is there a more streamlined process to onboard new users into TiDB Cloud beyond the manual invitation method?<\/li>\n\n\n\n<li><strong>Immediate access revocation<\/strong>: Can access to TiDB Cloud be revoked instantly for users when they leave the organization?<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Enhanced authentication:<\/strong> Does TiDB Cloud support two-factor authentication (2FA) or multi-factor authentication (MFA) for<a href=\"https:\/\/docs.pingcap.com\/tidbcloud\/tidb-cloud-encrypt-cmek\"> added security<\/a> while users sign into TiDB Cloud?<\/li>\n\n\n\n<li><strong>Enforcing password policies<\/strong>: Is it possible to mandate an <a href=\"https:\/\/docs.pingcap.com\/tidbcloud\/tidb-cloud-password-authentication\">enterprise-compliant password policy<\/a> across all users within the TiDB Cloud organization?&nbsp;<\/li>\n\n\n\n<li><strong>Authentication method uniformity<\/strong>: Can we ensure organization users adhere to one authentication method for TiDB Cloud, disabling other methods?<\/li>\n\n\n\n<li><strong>User group synchronization<\/strong>: Is there a mechanism to sync user groups from enterprise Identity Provider (IdP) to TiDB Cloud?&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>We designed Organization SSO with these pivotal enterprise needs in mind, aiming to enhance both security and operational efficiency.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_Does_Organization_SSO_Mean_for_You\"><\/span><strong>What Does Organization SSO Mean for You?&nbsp;<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>TiDB Cloud Organization SSO is meticulously crafted to address the intricacies of enterprise authentication, prioritizing robust security and compliance.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Seamless Integration with Your Chosen Identity Providers<\/strong><\/h3>\n\n\n\n<p>Using protocols like SAML and OIDC, Organization SSO allows effortless links with users\u2019 preferred identity providers such as Okta and Azure Active Directory. Once configured, users can sign in to TiDB Cloud using the password policy, MFA, and other security enforcements inherited from the identity provider.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1376\" height=\"1406\" src=\"https:\/\/static.pingcap.com\/files\/2024\/01\/02003504\/image.jpeg\" alt=\"\" class=\"wp-image-15455\" srcset=\"https:\/\/static.pingcap.com\/files\/2024\/01\/02003504\/image.jpeg 1376w, https:\/\/static.pingcap.com\/files\/2024\/01\/02003504\/image-294x300.jpeg 294w, https:\/\/static.pingcap.com\/files\/2024\/01\/02003504\/image-1002x1024.jpeg 1002w, https:\/\/static.pingcap.com\/files\/2024\/01\/02003504\/image-768x785.jpeg 768w\" sizes=\"auto, (max-width: 1376px) 100vw, 1376px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\"><em>Figure 1. Choose Your<strong> <\/strong>Identity Providers<\/em><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Customized Authentication to Fit Your Organization\u2019s Needs<\/strong><\/h3>\n\n\n\n<p>As an organization owner, you can tailor the authentication methods for a TiDB Cloud organization. For instance, specify SAML via Okta for employees and Google for consultants and customize the specifics at the organizational level. At the same time, the owner can disable other protocols, such as Microsoft and Github. As a result, we can get a customized organization sign-in page as shown below:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1066\" height=\"592\" src=\"https:\/\/static.pingcap.com\/files\/2024\/01\/02003506\/image-1.jpeg\" alt=\"\" class=\"wp-image-15456\" srcset=\"https:\/\/static.pingcap.com\/files\/2024\/01\/02003506\/image-1.jpeg 1066w, https:\/\/static.pingcap.com\/files\/2024\/01\/02003506\/image-1-300x167.jpeg 300w, https:\/\/static.pingcap.com\/files\/2024\/01\/02003506\/image-1-1024x569.jpeg 1024w, https:\/\/static.pingcap.com\/files\/2024\/01\/02003506\/image-1-768x427.jpeg 768w\" sizes=\"auto, (max-width: 1066px) 100vw, 1066px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\"><em>Figure 2. Sign-in Page<\/em><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Auto-Provisioning and Allowed Email Domains<\/strong><\/h3>\n\n\n\n<p>Organization SSO streamlines the user onboarding experience through auto-provisioning. This allows for automatic account creation when users first sign in using their enterprise&#8217;s authentication method. Organization owners or project owners need not manually go through the time-consuming invitation process for every new user.<\/p>\n\n\n\n<p>To ensure auto-provisioning security, organization owners can set up specific email domains only with the users who are allowed to sign in to TiDB Cloud.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>SCIM over SAML<\/strong><\/h3>\n\n\n\n<p>Organization SSO supports <a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc7644\">System for Cross-domain Identity Management (SCIM)<\/a> over SAML to automate user provisioning and de-provisioning. This simplifies the management of groups of users.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Elevating_Security_and_Efficiency_with_Organization_SSO\"><\/span><strong>Elevating Security and Efficiency with Organization SSO<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>The introduction of Organization Single-Sign-On (SSO) for TiDB Cloud marks a significant stride in our commitment to provide top-tier security and streamlined operational efficiency for enterprise users. By addressing the core needs of our customers in security and compliance, as well as integrating seamlessly with popular Identity Providers, we&#8217;re not just enhancing the security of TiDB Cloud. We&#8217;re also transforming the user experience.<\/p>\n\n\n\n<p>Organization SSO is now available for <a href=\"\/ko\/tidb-cloud-starter\/\">TiDB Serverless<\/a> \uadf8\ub9ac\uace0 <a href=\"https:\/\/www.pingcap.com\/ko\/tidb-dedicated\/\">TiDB Dedicated<\/a>, two TiDB Cloud deployment options. If you have yet to explore them, you can get started for free by creating a <a href=\"https:\/\/tidbcloud.com\/free-trial\/\">TiDB Serverless cluster<\/a>.\u00a0<\/p>","protected":false},"excerpt":{"rendered":"<p>We are thrilled to introduce a significant enhancement to TiDB Cloud&#8217;s security features: Organization Single-Sign-On (SSO) Authentication. This new feature streamlines enterprise authentication processes, enabling seamless integration with any Identity Provider (IdP) using Security Assertion Markup Language (SAML) or OpenID Connect (OIDC). Enterprise authentication is crucial to securing access to resources and data within TiDB [&hellip;]<\/p>\n","protected":false},"author":259,"featured_media":15453,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ub_ctt_via":"","footnotes":""},"categories":[13],"tags":[255,253,31],"class_list":["post-15385","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-product","tag-organization-sso","tag-security","tag-tidb-cloud"],"acf":[],"featured_image_src":"https:\/\/static.pingcap.com\/files\/2024\/01\/02003145\/org-sso-banner.jpeg","author_info":{"display_name":"Roger Zhou","author_link":"https:\/\/www.pingcap.com\/ko\/blog\/author\/roger-zhou\/"},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Organization SSO Authentication in TiDB Cloud<\/title>\n<meta name=\"description\" content=\"Explore how TiDB Cloud&#039;s Organization SSO Authentication streamlines the enterprise auth process with any Identity Provider (IdP).\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.pingcap.com\/ko\/blog\/announcing-organization-sso-authentication-tidb-cloud\/\" \/>\n<meta property=\"og:locale\" content=\"ko_KR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Organization SSO Authentication in TiDB Cloud\" \/>\n<meta property=\"og:description\" content=\"Explore how TiDB Cloud&#039;s Organization SSO Authentication streamlines the enterprise auth process with any Identity Provider (IdP).\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.pingcap.com\/ko\/blog\/announcing-organization-sso-authentication-tidb-cloud\/\" \/>\n<meta property=\"og:site_name\" content=\"TiDB\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/facebook.com\/pingcap2015\" \/>\n<meta property=\"article:published_time\" content=\"2024-01-02T08:35:12+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-19T11:10:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/static.pingcap.com\/files\/2024\/01\/02003231\/org-sso-social.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1875\" \/>\n\t<meta property=\"og:image:height\" content=\"938\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Roger Zhou\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/static.pingcap.com\/files\/2024\/01\/02003145\/org-sso-banner.jpeg\" \/>\n<meta name=\"twitter:creator\" content=\"@PingCAP\" \/>\n<meta name=\"twitter:site\" content=\"@PingCAP\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Roger Zhou\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3\ubd84\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/\"},\"author\":{\"name\":\"Roger Zhou\",\"@id\":\"https:\/\/www.pingcap.com\/#\/schema\/person\/6b5685219d8e02127ea91e95a7549976\"},\"headline\":\"Announcing Organization SSO Authentication in TiDB Cloud\",\"datePublished\":\"2024-01-02T08:35:12+00:00\",\"dateModified\":\"2025-08-19T11:10:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/\"},\"wordCount\":686,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.pingcap.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/static.pingcap.com\/files\/2024\/01\/02003145\/org-sso-banner.jpeg\",\"keywords\":[\"Organization SSO\",\"Security\",\"TiDB Cloud\"],\"articleSection\":[\"Product\"],\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/\",\"url\":\"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/\",\"name\":\"Organization SSO Authentication in TiDB Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.pingcap.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/static.pingcap.com\/files\/2024\/01\/02003145\/org-sso-banner.jpeg\",\"datePublished\":\"2024-01-02T08:35:12+00:00\",\"dateModified\":\"2025-08-19T11:10:00+00:00\",\"description\":\"Explore how TiDB Cloud's Organization SSO Authentication streamlines the enterprise auth process with any Identity Provider (IdP).\",\"breadcrumb\":{\"@id\":\"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#breadcrumb\"},\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"ko-KR\",\"@id\":\"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#primaryimage\",\"url\":\"https:\/\/static.pingcap.com\/files\/2024\/01\/02003145\/org-sso-banner.jpeg\",\"contentUrl\":\"https:\/\/static.pingcap.com\/files\/2024\/01\/02003145\/org-sso-banner.jpeg\",\"width\":1875,\"height\":625},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.pingcap.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Announcing Organization SSO Authentication in TiDB Cloud\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.pingcap.com\/#website\",\"url\":\"https:\/\/www.pingcap.com\/\",\"name\":\"TiDB\",\"description\":\"TiDB | SQL at Scale\",\"publisher\":{\"@id\":\"https:\/\/www.pingcap.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.pingcap.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ko-KR\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.pingcap.com\/#organization\",\"name\":\"PingCAP\",\"url\":\"https:\/\/www.pingcap.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ko-KR\",\"@id\":\"https:\/\/www.pingcap.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/static.pingcap.com\/files\/2021\/11\/pingcap-logo.png\",\"contentUrl\":\"https:\/\/static.pingcap.com\/files\/2021\/11\/pingcap-logo.png\",\"width\":811,\"height\":232,\"caption\":\"PingCAP\"},\"image\":{\"@id\":\"https:\/\/www.pingcap.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/facebook.com\/pingcap2015\",\"https:\/\/x.com\/PingCAP\",\"https:\/\/linkedin.com\/company\/pingcap\",\"https:\/\/youtube.com\/channel\/UCuq4puT32DzHKT5rU1IZpIA\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.pingcap.com\/#\/schema\/person\/6b5685219d8e02127ea91e95a7549976\",\"name\":\"Roger Zhou\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ko-KR\",\"@id\":\"https:\/\/www.pingcap.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/static.pingcap.com\/files\/2023\/12\/21183525\/Roger-Zhou-150x150.jpeg\",\"contentUrl\":\"https:\/\/static.pingcap.com\/files\/2023\/12\/21183525\/Roger-Zhou-150x150.jpeg\",\"caption\":\"Roger Zhou\"},\"description\":\"TiDB Cloud Product Manager\",\"url\":\"https:\/\/www.pingcap.com\/ko\/blog\/author\/roger-zhou\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Organization SSO Authentication in TiDB Cloud","description":"Explore how TiDB Cloud's Organization SSO Authentication streamlines the enterprise auth process with any Identity Provider (IdP).","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.pingcap.com\/ko\/blog\/announcing-organization-sso-authentication-tidb-cloud\/","og_locale":"ko_KR","og_type":"article","og_title":"Organization SSO Authentication in TiDB Cloud","og_description":"Explore how TiDB Cloud's Organization SSO Authentication streamlines the enterprise auth process with any Identity Provider (IdP).","og_url":"https:\/\/www.pingcap.com\/ko\/blog\/announcing-organization-sso-authentication-tidb-cloud\/","og_site_name":"TiDB","article_publisher":"https:\/\/facebook.com\/pingcap2015","article_published_time":"2024-01-02T08:35:12+00:00","article_modified_time":"2025-08-19T11:10:00+00:00","og_image":[{"width":1875,"height":938,"url":"https:\/\/static.pingcap.com\/files\/2024\/01\/02003231\/org-sso-social.jpeg","type":"image\/jpeg"}],"author":"Roger Zhou","twitter_card":"summary_large_image","twitter_image":"https:\/\/static.pingcap.com\/files\/2024\/01\/02003145\/org-sso-banner.jpeg","twitter_creator":"@PingCAP","twitter_site":"@PingCAP","twitter_misc":{"Written by":"Roger Zhou","Est. reading time":"3\ubd84"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#article","isPartOf":{"@id":"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/"},"author":{"name":"Roger Zhou","@id":"https:\/\/www.pingcap.com\/#\/schema\/person\/6b5685219d8e02127ea91e95a7549976"},"headline":"Announcing Organization SSO Authentication in TiDB Cloud","datePublished":"2024-01-02T08:35:12+00:00","dateModified":"2025-08-19T11:10:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/"},"wordCount":686,"commentCount":0,"publisher":{"@id":"https:\/\/www.pingcap.com\/#organization"},"image":{"@id":"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#primaryimage"},"thumbnailUrl":"https:\/\/static.pingcap.com\/files\/2024\/01\/02003145\/org-sso-banner.jpeg","keywords":["Organization SSO","Security","TiDB Cloud"],"articleSection":["Product"],"inLanguage":"ko-KR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/","url":"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/","name":"Organization SSO Authentication in TiDB Cloud","isPartOf":{"@id":"https:\/\/www.pingcap.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#primaryimage"},"image":{"@id":"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#primaryimage"},"thumbnailUrl":"https:\/\/static.pingcap.com\/files\/2024\/01\/02003145\/org-sso-banner.jpeg","datePublished":"2024-01-02T08:35:12+00:00","dateModified":"2025-08-19T11:10:00+00:00","description":"Explore how TiDB Cloud's Organization SSO Authentication streamlines the enterprise auth process with any Identity Provider (IdP).","breadcrumb":{"@id":"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#breadcrumb"},"inLanguage":"ko-KR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/"]}]},{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#primaryimage","url":"https:\/\/static.pingcap.com\/files\/2024\/01\/02003145\/org-sso-banner.jpeg","contentUrl":"https:\/\/static.pingcap.com\/files\/2024\/01\/02003145\/org-sso-banner.jpeg","width":1875,"height":625},{"@type":"BreadcrumbList","@id":"https:\/\/www.pingcap.com\/blog\/announcing-organization-sso-authentication-tidb-cloud\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.pingcap.com\/"},{"@type":"ListItem","position":2,"name":"Announcing Organization SSO Authentication in TiDB Cloud"}]},{"@type":"WebSite","@id":"https:\/\/www.pingcap.com\/#website","url":"https:\/\/www.pingcap.com\/","name":"\ud2f0DB","description":"TiDB | SQL at Scale","publisher":{"@id":"https:\/\/www.pingcap.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.pingcap.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ko-KR"},{"@type":"Organization","@id":"https:\/\/www.pingcap.com\/#organization","name":"PingCAP","url":"https:\/\/www.pingcap.com\/","logo":{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/www.pingcap.com\/#\/schema\/logo\/image\/","url":"https:\/\/static.pingcap.com\/files\/2021\/11\/pingcap-logo.png","contentUrl":"https:\/\/static.pingcap.com\/files\/2021\/11\/pingcap-logo.png","width":811,"height":232,"caption":"PingCAP"},"image":{"@id":"https:\/\/www.pingcap.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/facebook.com\/pingcap2015","https:\/\/x.com\/PingCAP","https:\/\/linkedin.com\/company\/pingcap","https:\/\/youtube.com\/channel\/UCuq4puT32DzHKT5rU1IZpIA"]},{"@type":"Person","@id":"https:\/\/www.pingcap.com\/#\/schema\/person\/6b5685219d8e02127ea91e95a7549976","name":"Roger Zhou","image":{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/www.pingcap.com\/#\/schema\/person\/image\/","url":"https:\/\/static.pingcap.com\/files\/2023\/12\/21183525\/Roger-Zhou-150x150.jpeg","contentUrl":"https:\/\/static.pingcap.com\/files\/2023\/12\/21183525\/Roger-Zhou-150x150.jpeg","caption":"Roger Zhou"},"description":"TiDB Cloud Product Manager","url":"https:\/\/www.pingcap.com\/ko\/blog\/author\/roger-zhou\/"}]}},"grav_blocks":false,"card_markup":"<a class=\"card-resource bg-white\" href=\"https:\/\/www.pingcap.com\/ko\/blog\/announcing-organization-sso-authentication-tidb-cloud\/\"><div class=\"card-resource__image-container\"><img class=\"card-resource__image\" alt=\"org sso banner\" src=\"https:\/\/static.pingcap.com\/files\/2024\/01\/02003145\/org-sso-banner.jpeg\" loading=\"lazy\" width=1875 height=625 \/><\/div><div class=\"card-resource__content-container\"><div class=\"card-resource__content-head\"><div class=\"card-resource__category\">Product<\/div><\/div><h5 class=\"card-resource__title\">Announcing Organization SSO Authentication in TiDB Cloud<\/h5><\/div><\/a>","_links":{"self":[{"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/posts\/15385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/users\/259"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/comments?post=15385"}],"version-history":[{"count":9,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/posts\/15385\/revisions"}],"predecessor-version":[{"id":29057,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/posts\/15385\/revisions\/29057"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/media\/15453"}],"wp:attachment":[{"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/media?parent=15385"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/categories?post=15385"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/tags?post=15385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}