Alibaba Cloud IDaaS

Alibaba Cloud IDaaS (Identity as a Service) is a cloud-based Identity and Access Management (IAM) platform deeply integrated with Alibaba Cloud's cloud-native capabilities. It is designed to address authentication and access management challenges across complex environments, including on-premises, hybrid, and multi-cloud scenarios. The platform eliminates identity silos by providing a unified identity management layer that allows users to access all applications through a single account. The service is built around a "5A" framework: Application, Authorization, Account, Authentication, and Audit. It supports Single Sign-On (SSO) using mainstream standard protocols, enabling integration with enterprise applications including web, mobile, desktop, and IoT. Multi-factor authentication (MFA) is supported, including dynamic tokens, certificates, biometrics (face and fingerprint recognition). A unified user directory provides centralized account lifecycle management with automatic downstream synchronization. Authorization is managed centrally by department or role, with changes taking effect globally. Behavior auditing provides detailed records of user actions and administrator operations, presented as visual reports. The platform also supports Machine-to-Machine (M2M) authentication for machine identity and permission management. IDaaS can act as an identity bridge between Alibaba Cloud, private environments, and other public cloud providers. A developer API is available for integrating IDaaS authentication capabilities into third-party applications. The service is available in Mainland China, Hong Kong, Singapore, Germany, South Korea, and Indonesia. Enterprise Edition is billed per account, starting at $4/account/month.