1

Custom setting of account lockout duration after five consecutive login failures

After an IAM user fails to log in for five consecutive times, the account lockout duration that can be customized by the administrator is expanded from 30 minutes to 24 hours.

Commercial use

Login Authentication Policy

1

Optimization of the federated login error message

The federated login error message is optimized to help self-service troubleshooting.

Commercial use

Identity Providers

2

Custom port setting for OpenID Connect identity providers

Port setting can be customed for OpenID Connect identity providers.

Commercial use

Create an IdP Entity

1

Security features

IAM can secure personal data and access control.

Commercial use

Security

1

Batch operations supported

You can perform batch operations on the console, including batch modifying IAM user information, batch deleting IAM users, user groups, or agencies, and batch revoking permissions of a user group.

Commercial use

Batch Modifying IAM User Information

Batch Deleting IAM Users

Batch Deleting User Groups

Batch Revoking Permissions of a User Group

1

IAM user SSO available in identity provider creation

When creating an identity provider compatible with Security Assertion Markup Language (SAML), the administrator can select virtual user SSO or IAM user SSO.

• Virtual user SSO: After a federated user logs in to Huawei Cloud, the system automatically creates a virtual user for the federated user. An account can have multiple identity providers of the virtual user SSO type.
• IAM user SSO: After a federated user logs in to Huawei Cloud, the system maps the user to an IAM user based on the configured identity conversion rules. Only one identity provider of the IAM user SSO type can be created under an account.

Commercial use

Create an IdP Entity

1

Agency authorization by enterprise project

You can flexibly grant permissions for using specified enterprise projects to other accounts.

Commercial use

Creating an Agency

1

Recommending authorization scope based on permissions

An authorization scope is recommended based on selected permissions to comply with the principle of least privilege.

Commercial use

Assigning Permissions to a User Group

2

Creation of custom policies during authorization

You can create custom policies during authorization.

Commercial use

Creating a Custom Policy

3

Authorization by enterprise project

You can assign permissions to enterprise projects' users and user groups on the IAM console without going to the Enterprise Center.

Commercial use

Assigning Permissions to a User Group

1

Limit on the number of mapping rules for identity providers

You can query and modify the total quota of mapping rules for all identity providers in your account.

Commercial use

Notes and Constraints

1

Information self-management

• If information self-management is enabled, all IAM users can manage their own Basic Information (login password, mobile number, and email address).

• If information self-management is disabled, only administrators can manage their own basic information.

Commercial use

Information Self-Management

2

Upgraded permissions management function

• You can view permissions assigned to specific users, user groups, or agencies.

• All authorization records under your account are displayed on the Permissions > Assignment page.

• You can view authorization records by IAM or enterprise projects.

Commercial use

Viewing Authorization Records

1

Federated user login

After the administrator of your enterprise creates an identity provider and configures identity conversion rules on HUAWEI CLOUD, federated users can log in to HUAWEI CLOUD using their account names and passwords for the enterprise identity system. Then these users can use cloud services based on assigned permissions.

Commercial use

Logging In as a Federated User

1

Display of access type, MFA device binding status, password age, and access key status in the user list

The administrator can tailor the display items of the user list. The available items include description, last login time, creation time, access type, MFA device binding status, password age, and access key status.

Commercial use

Viewing or Modifying IAM User Information

2

HUAWEI CLOUD login with a HUAWEI ID

A HUAWEI ID is a unified identity that you can use to visit all websites of Huawei. Now you can use your HUAWEI ID to log in to the HUAWEI CLOUD management console.

Commercial use

Logging In to HUAWEI CLOUD

1

Customization of agency validity period

The administrator can customize the validity period when creating or modifying an agency.

An agency can be of unlimited validity or be valid for 1 day or a specific number of days (1 to 365).

Commercial use

Creating an Agency