manage setup-iam-integration

Important: IBM Cloud Pak® for Data Version 4.6 will reach end of support (EOS) on 31 July, 2025. For more information, see the Discontinuance of service announcement for IBM Cloud Pak for Data Version 4.X.

Upgrade to IBM Software Hub Version 5.1 before IBM Cloud Pak for Data Version 4.6 reaches end of support. For more information, see Upgrading IBM Software Hub in the IBM Software Hub Version 5.1 documentation.

Specify whether you want to use the IBM Cloud Pak foundational services IAM Service to connect to your identity provider (IdP).

Extended description

After you install the IBM Cloud Pak for Data control plane, you can optionally integrate the with the Identity and Access Management Service (IAM Service) provided by IBM Cloud Pak foundational services.

For more information about the benefits and drawbacks of integrating with the IAM Service, see Integrating with the IAM Service.

Important: Make the decision about whether you want to use the IAM Service before you grant users access to the platform.

It is possible to migrate users from the Cloud Pak for Data user management service to the IAM Service, however, you cannot migrate users from the IAM Service to the Cloud Pak for Data user management service. Switching between the user management methods might prevent users from accessing objects or services on the platform.

Run the setup-iam-integration to enable or disable an integration with the IAM Service.

Syntax

cpd-cli manage setup-iam-integration \
--enable=true|false \
--cpd_instance_ns=<project-name>

Arguments

The setup-iam-integration command has no arguments.

Options

Option Description
--cpd_instance_ns The project (namespace) where IBM Cloud Pak for Data is installed.
Status
Required.
Syntax
--cpd_instance_ns=<project-name>
Default value
No default. User-defined.
Valid values
The project (namespace) where IBM Cloud Pak for Data is installed.
--enable Specify whether you want to integrate with the IAM service.
Status
Required.
Syntax
--enable=true|false
Default value
No default.
Valid values
false
Disable an existing integration with the IAM Service.
true
Enable integration with the IAM Service service.

After you enable integration with the IAM Service, see Connecting to your identity provider for information on how to connect to your identity providers.

Examples

Note: The following example uses the recommended installation environment variables.

Use a script to create environment variables with the correct values for your environment. For details, see Best practice: Setting up install variables.

Integrate with the IAM Service
cpd-cli manage setup-iam-integration \
--enable=true \
--cpd_instance_ns=${PROJECT_CPD_INSTANCE}