Signing in to the CloudBees CD/RO web interface

2 minute readReference

This section describes how to sign in to the CloudBees CD/RO web interface. During installation if you chose to configure an external database, you will not be able to sign in until you set up a database configuration.

To sign in, copy https://<webHostName>/flow/ into a browser window, then enter your CloudBees CD/RO web host name as the <webHostName>.

One of the following sign-in pages displays, based on the server’s single sign-on (SSO) setting. For information about enabling SSO at your enterprise, refer to Configuring single sign-on for CloudBees Software Delivery Automation.

If you experience page redirect problems during SSO sign in, you can modify the session.cookie_samesite setting by completing the following steps:

  1. Open the /opt/electriccloud/electriccommander/apache/conf/php.ini file.

  2. Change the session.cookie_samesitesetting value to Lax.

  3. Restart your CloudBees CD/RO web server.

SSO enabled

The sample sign-in page below is SSO-enabled with GSuite and Kerberos SSO. Your page may be enabled with other SSO identity providers, such as Okta.

SSO enabled
Figure 1. SSO enabled

From here, use one of the following methods to sign in:

  • Select Sign in with Google: The credentials are authenticated via the Google identify provider, and if successful, you are redirected to the home page.

  • Select Sign in with Kerberos: This system has additionally been enabled with Kerberos SSO. The credentials are authenticated, and if successful, you are redirected to the home page.

  • Enter a Username and Password for local authentication. Then select Sign in. If successful, you are redirected to the home page.

If you do not already have an active session, you are unable to sign in through the CloudBees CD/RO server when the CloudBees CD/RO server is being upgraded. The following message appears on the sign-in screen until the CloudBees CD/RO server upgrade is complete: “Server is starting. Please wait.”

SSO disabled

This sign-in page has SSO disabled:

SSO disabeld
Figure 2. SSO disabled

From here, enter a Username and Password and then select Sign in. If successful, you are redirected to the home page.

For a new installation, the default admin account username is admin, and the password is changeme. You should change the default admin password as soon as possible.

Managing access tokens via UI

An admin user can set default token timeouts, minimum token timeouts, maximum token timeouts, and maximum number of tokens per user. Configure these options by navigating to Administration  Server settings  Security settings.

You can use the UI to manage your personal tokens, and the admin user can manage another user’s tokens.

  • To manage your personal tokens:

    1. Select your name in upper right corner of the CloudBees CD/RO UI.

    2. Select Profile. The User profile page displays.

    3. Select Access tokens on the User profile screen. The Access tokens page displays.

  • To manage another user’s token (admin user only):

    1. Navigate to Administration  Users.

    2. Select Access tokens from the user’s three-dots three-dots menu. The Access tokens page displays.

Acess tokens
Figure 3. Access tokens
On the Access tokens page, the admin can only delete tokens.
  1. Manage tokens.

    • Select the navigation links to access other users.

    • Add a token by selecting Create access token.

  2. Configure a token.

    • Delete a token by:

      1. Selecting token checkbox.

      2. Selecting Delete access token.

    • Edit token name or description by selecting the Name link or three-dots three-dots menu.