Zum Hauptinhalt springen
This page is not translated yet. Deutsch is switched on so the navigation and URLs can be tested; the text below is the English original. Use the language selector in the header to switch back, or see the documentation home.

Identity & Access

section-index · Reviewed 2026-11-02 GA

How people get onto the platform, what they can reach once there, and how they are removed. If you are setting up a new organization, work through Authentication first, then User lifecycle.

Two models worth distinguishing

An identity is one email address with access to Rescale. A user is that identity's membership of a single workspace. One identity can be a user in several workspaces, which is why deactivating someone from one workspace doesn't necessarily remove them from the platform. See user lifecycle.

Authentication​

How someone proves who they are. Most organizations settle this once: either you federate to your own identity provider with SSO, in which case your IdP owns passwords and second factors, or members sign in with a Rescale password, in which case the password policy and MFA pages below are what govern them.

Single sign-on (SSO)
SAML setup, attribute mapping, access policy, and per-region endpoints.
Multi-factor authentication
MFA for Rescale accounts, alongside or instead of your IdP's.
Password policy
Complexity, age, and reuse rules for Rescale passwords. Organization-level.

User lifecycle​

Getting people onto the platform and off it again. The order matters here: offboarding forces decisions about a departing user's jobs and files that cannot be undone, so it is worth reading before you need it rather than during.

Invite and manage users
Add people to a workspace, delegate admin rights, and understand default workspaces.
Offboard a user
What happens to their jobs, files, and storage, and what can't be recovered.
Custom usernames
Map cluster usernames to real people so license checkouts are attributable.

Controls and visibility​

Constraints on where access can come from, and the records of what was done. These are mostly organization-level and mostly set once, with the exception of access restrictions, which members can also apply to their own clusters.

Audit logs
Reference: every event recorded, who can see them, and the export gap.
Access restrictions
Limit platform and cluster access by IP or CIDR rule.
Firewall administration
Administer the Rescale firewall for jobs and workstations.
Control Plane IP addresses
IPs to allowlist for BYOC and BYOS integrations.