​
Configure local admin and users

When you first start Conduktor Console, a local admin will be created using the credentials you provided. This admin account allows you to make some actions like creating users and groups, connecting clusters or giving permissions, in order to initialize your instance before onboarding users. You can add new users via the Console UI, the configuration file or through environment variables.

​
Add users in Console UI

In Console, got to Settings > Users page and click Create members at the top-right. Select SSO or Local: Enter user’s email address and click Add. Add users You can later to add users from an IAC approach using the ConsoleGroup component.

​
Configuration example

Here’s an example of adding an administrator admin@conduktor.io with two local users alice@conduktor.io and bob@conduktor.io:
platform-config.yaml
admin:
  email: admin@conduktor.io
  password: admin-secret

auth:
  local-users:
    - email: alice@conduktor.io
      password: alice-secret
    - email: bob@conduktor.io
      password: bob-secret

​
Configure SSO

In addition to these local admin and users, you can set up Single Sign-On (SSO) so your users can log in using your company LDAP or OIDC identity provider.
This feature only works after setting up Console to use your identity provider as SSO. To be guided through the steps, please select your identity provider.

​
Manage user permissions before first login

For the user to appear in the users list in Console, they have to log in first. To ensure appropriate access, you can configure permissions before their first login. To do that:
  • Go to the Users page and click Create members.
  • Select SSO and enter the email of the user you want to add, then click Add.
  • You can also add them to a group. Go to the Groups page, select the group and click Add members.

​
Local account config properties

PropertyDescriptionEnvironment variableMandatoryTypeDefault value
auth.local-users[].emailUser loginCDK_AUTH_LOCALUSERS_0_EMAILtruestring"admin@conduktor.io"
auth.local-users[].passwordUser passwordCDK_AUTH_LOCALUSERS_0_PASSWORDtruestring"admin"