Authentication

Overview

DB24x7 provides enterprise-grade authentication mechanisms to ensure secure access to your database infrastructure. Our multi-layered authentication system supports various identity providers and security protocols.

SSO/SAML Setup

Configure enterprise single sign-on to streamline user access management through your existing identity provider.

Supported Identity Providers

• Okta
• Azure Active Directory (Azure AD)
• Google Workspace
• OneLogin
• Auth0
• Any SAML 2.0 compliant provider

Configuration Steps

1. Navigate to Settings: Go to Settings Organization Authentication SSO/SAML
2. Enable SAML: Toggle the SAML authentication option
3. Configure Identity Provider: Enter the following details from your IdP:
   • SSO URL / SAML Endpoint
   • Entity ID / Issuer
   • X.509 Certificate
4. Set Service Provider Details: Copy the following information to your IdP:
   • ACS URL: https://your-org.db24x7.com/auth/saml/acs
   • Entity ID: https://your-org.db24x7.com
   • Start URL: https://your-org.db24x7.com/auth/saml
5. Configure Attribute Mapping: Map SAML attributes to user properties (email, name, role)
6. Test Connection: Use the test button to verify configuration
7. Enable for Organization: Activate SAML for all users

OAuth Providers

Allow users to sign in using their existing accounts from popular OAuth providers.

Available Providers

Configuration

To enable OAuth providers:

1. Go to Settings Organization Authentication OAuth
2. Select the provider you want to enable
3. Enter the Client ID and Client Secret from your OAuth application
4. Configure authorized callback URL
5. Save and test the configuration

API Key Management

Manage API keys for programmatic access to DB24x7 services.

Creating API Keys

1. Navigate to Settings API Keys
2. Click "Create New API Key"
3. Provide a descriptive name for the key
4. Select the appropriate scope and permissions
5. Set an expiration date (optional but recommended)
6. Copy the generated key immediately (it won't be shown again)

API Key Types

Using API Keys

curl -X GET https://api.db24x7.com/v1/databases \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json"

Two-Factor Authentication (2FA)

Add an extra layer of security to user accounts with two-factor authentication.

Supported 2FA Methods

Enabling 2FA (Users)

1. Go to Account Settings Security
2. Click "Enable Two-Factor Authentication"
3. Scan the QR code with your authenticator app
4. Enter the 6-digit code to verify setup
5. Save your recovery codes in a secure location

Enforcing 2FA (Organizations)

Organization administrators can require 2FA for all members:

1. Go to Settings Organization Security
2. Enable "Require Two-Factor Authentication"
3. Set a grace period for users to enable 2FA (e.g., 7 days)
4. Users without 2FA will be prompted to set it up on next login

Session Management

Control and monitor user sessions for enhanced security.

Session Settings

Active Session Management

Users can view and manage their active sessions:

• View all active sessions with device and location info
• See last activity timestamp for each session
• Revoke individual sessions remotely
• Sign out of all other sessions with a single click

Related Documentation