Skip to navigation Skip to main content
Red Hat Offline Knowledge Portal
Search Content extracted on: 2026-09-15
  1. Home
  2. Product Documentation
  3. Red Hat Ansible Automation Platform — automation orchestrator
  4. 2026.8
  5. Authenticate users and systems
  6. Manage identity provider links
What's new
  1. Automation orchestrator release notes
    1. API changelog
    2. New features and enhancements
    3. Breaking changes
    4. Known issues
    5. Common Vulnerabilities and Exposures (CVE) fixes
    6. Bug fixes
  2. Developer Preview features
Discover
  1. What is automation orchestrator?
    1. Workflow concepts
    2. Agentic steps in a workflow
Get started
  1. What is the workflow designer?
    1. Understand the workflow designer
    2. Find your way around the user interface
  2. Create your first workflow
    1. Workflow planning and prerequisites
    2. Add a trigger step
    3. Add workflow steps
    4. Arrange and connect the steps
    5. Run and monitor your workflow
Plan
  1. Choose a deployment model
  2. Understand the Ansible Automation Platform co-located topology
  3. Understand the independent topology
  4. Understand the air-gapped topology
  5. Automation orchestrator operator-managed NetworkPolicies
Install
  1. Install and manage automation orchestrator
    1. Understand release channels
    2. Plan your installation
    3. Automation orchestrator system requirements
    4. Prepare the installation environment
    5. Understand aapctl
      1. Download aapctl
    6. Install with aapctl
    7. Customize the aapctl installation
    8. Enable OpenTelemetry collection with aapctl
    9. Generate aapctl manifests for GitOps
    10. Understand aapctl manifest application order
    11. Install the operator from the OpenShift CLI
    12. Install the operator from the web console
    13. Create an instance from the web console
    14. Create an instance from the CLI
    15. Custom resource field reference
    16. Retrieve the initial admin password
    17. Monitor the deployment
    18. Upgrade automation orchestrator
    19. Uninstall automation orchestrator
  2. Perform day-2 operations
    1. Scale automation orchestrator components
    2. Manage automation orchestrator from the command line
    3. Rotate the credential encryption key
    4. Understand internal TLS
    5. Provide your own internal TLS certificates
      1. Provide internal TLS certificates with cert-manager
    6. Rotate internal TLS certificates
    7. Back up automation orchestrator
    8. Understand the automation orchestrator restore process
    9. aapctl command reference
    10. Installation reference
    11. Release channel and version reference
Develop
  1. Start workflows with triggers
    1. Understand workflow triggers
    2. Add a manual trigger
    3. Add a webhook trigger
    4. Add an Event-Driven Ansible trigger
    5. Schedule a workflow with a cron expression
    6. Schedule a workflow with a visual schedule
    7. Identify the trigger for a workflow run
  2. Add task agents to workflows
    1. Understand task agent nodes in workflows
    2. Add a task agent step
    3. Delete an uploaded context file permanently
    4. Review task agent reasoning and tool calls
    5. Common task agent step patterns
    6. Use task agent best practices
  3. Add human oversight to workflows
    1. Understand workflow approvals
    2. Add an approval step to a workflow
    3. Respond to an approval from the Approvals page
    4. Respond to an approval from the execution viewer
    5. Approve or reject multiple approval requests
  4. Add action steps to workflows
    1. Understand REST API steps
    2. Add a REST API step to a workflow
  5. Add Ansible Automation Platform to workflows
    1. Understand Ansible Automation Platform execution steps
    2. Add an Ansible Automation Platform job template step
    3. Add an Ansible Automation Platform workflow template step
    4. Understand inputs and outputs for Ansible Automation Platform steps
    5. Use job output in a downstream step
    6. Run Ansible Automation Platform across multiple environments
  6. Control workflow execution
    1. Understand control flow steps
    2. Add a wait step to a workflow
    3. Add a conditional step to a workflow
    4. Add a switch step to a workflow
    5. Add a converge step to a workflow
    6. Add a For each loop step to a workflow
    7. Add a While loop step to a workflow
    8. Loop context and iteration variables
    9. Common loop patterns
    10. Connect steps and pass data between them
  7. Test workflows with real or mock data
    1. Understand testing individual workflow steps
    2. Supported step types for testing
    3. Test with real data
    4. Understand mock data for step testing
    5. Test with mock data
    6. Mock data examples for control flow steps
  8. Save, publish, and manage workflow versions
    1. Understand workflow versioning and publishing
    2. Publish a workflow version
    3. Unpublish a workflow
    4. Duplicate a workflow
    5. Delete a workflow
    6. View workflow version history
    7. Roll back to a previous workflow version
    8. Resolve a workflow version conflict
    9. Look up workflow version API endpoints
  9. Validate workflows
    1. Understand workflow validation
    2. Check your workflow for errors before publishing
    3. Save a workflow that has validation issues
    4. Validate a workflow definition without saving
    5. Common workflow validation errors
  10. Share and promote workflows
    1. Understand exporting and importing workflows
    2. Export a workflow
    3. Import from the Workflows page
    4. Import from the Workflow Builder
    5. Troubleshoot workflow imports
  11. Use case: Automated incident remediation
    1. Understand automated web service remediation workflows
    2. Build a workflow to remediate web service failures
  12. Integrate with the REST API
    1. Interact with automation orchestrator programmatically
    2. Get started with the REST API
    3. Access and use the OpenAPI specification
    4. Integrate external systems with the REST API
    5. Determine required API permissions
    6. Format API requests and interpret responses
    7. Paginate, filter, and sort API results
    8. Interpret REST API error responses
    9. Manage workflows through the API
    10. Credential API endpoints
    11. Troubleshoot REST API requests
    12. Understand API rate limiting
    13. Plan for API version changes
    14. Discover the current API version
Configure
  1. Secure and govern the platform
    1. Understand policy-based access control
    2. Organize users and resources into groups and projects
    3. Understand resource deletion behavior
  2. Authenticate users and systems
    1. Choose an authentication method
    2. Session and token behavior
    3. User provisioning
    4. How user accounts link to identity providers
    5. Group memberships
    6. Manage the built-in administrator
      1. Log in with the built-in administrator
      2. Built-in account protections
      3. Disable the built-in administrator
      4. Re-enable the built-in administrator
      5. Disable local login for non-built-in users
      6. Re-enable local login for non-built-in users
    7. Add Ansible Automation Platform as an identity provider automatically
    8. Add a generic OIDC identity provider
    9. Manage identity providers
    10. Manage groups
    11. User and group management
      1. Filter users by authentication method
      2. Create a local user
      3. Delete a user
      4. Manage identity provider links
      5. Manage group memberships
    12. Session management
      1. Enable single logout
      2. Understand logout behavior
      3. Revoke sessions
      4. Permission change propagation
    13. Authentication security
    14. Authentication API reference
    15. Authentication configuration reference
  3. Configure integrations
    1. Integrations in the automation orchestrator
    2. Allow internal service URLs for integrations
    3. Configure an LLM provider integration
    4. Configure an Ansible Automation Platform integration
    5. Configure an MCP server integration
    6. Test integration connections
    7. Monitor integration health status
    8. Integration configuration field reference
    9. Troubleshoot integration health issues
  4. Manage built-in workflows and background execution
    1. Understand built-in workflows
    2. View built-in workflows
    3. Configure background worker scaling
    4. Background execution reference
Secure
  1. Control access with policies and roles
    1. Control access with predefined roles
    2. Define access rules with policies
    3. Create a custom role
    4. Assign a role
    5. Remove a role assignment
    6. How permission inheritance works
    7. View effective permissions
    8. Authorization API reference
  2. Manage credentials to secure your automation workflows
    1. Understand credential management
    2. Choose a credential type
    3. Create and manage credentials
    4. Attach credentials to workflow nodes
    5. Secure credential storage and encryption
  3. Enable programmatic API access with service accounts
    1. Understand service accounts
    2. Create a service account
    3. Assign RBAC roles to a service account
    4. Delegate service account access across projects
    5. Authenticate with client credentials
    6. Rotate a service account secret
    7. Disable a service account
    8. Disable a service account credential
    9. Delete a service account
    10. Identify unused service accounts
    11. Service account API reference
Observe
  1. Monitor audit events
    1. Understand audit logging
    2. Understand audit event delivery
    3. Audit data retention reference
    4. Configure OTLP forwarding
    5. Audit event reference
    6. Authorization audit events
    7. Authentication audit events
    8. Service account audit events
  2. Access operational logs
    1. Understand operational logs
    2. Configure log levels
    3. Operational log data reference
  3. Collect and view logs in-cluster
    1. Understand in-cluster logging
    2. Deploy the OpenShift Logging stack
    3. Configure in-cluster log emission
    4. View events in the OpenShift console
  4. Monitor workflow runs
    1. Identify workflow execution statuses
    2. Monitor workflow runs
  5. Understand collected telemetry data
    1. Understand automation orchestrator observability
    2. How automation orchestrator protects telemetry privacy
    3. Analytics telemetry runtime settings
    4. Review collected analytics data
  6. Monitor platform health with Prometheus metrics
    1. Understand Prometheus metrics
    2. Send metrics to an external monitoring system
    3. OpenTelemetry endpoint URL requirements
    4. Integrate metrics with OpenShift monitoring
    5. Troubleshoot Prometheus metrics collection
    6. Prometheus metrics reference
Optimize
  1. Manage global application runtime settings
    1. Understand global application runtime settings
    2. Configure application runtime settings
    3. Reset a single runtime setting
    4. Reset all runtime settings in a category
    5. UI Reference: Application runtime settings
    6. API Reference: Application runtime settings
Troubleshoot
  1. Troubleshoot with logs and diagnostics
    1. Collect diagnostic information for support
    2. Troubleshoot installation
    3. Troubleshoot credential errors
    4. Troubleshoot authorization
    5. Troubleshoot authentication
  2. Troubleshoot workflow runs
    1. Troubleshoot failed workflow runs
    2. Resolve common workflow failures
Reference
  1. Node type catalog
    1. Node type catalog, settings, and common output fields
Download PDF
  1. Red Hat Ansible Automation Platform — automation orchestrator 2026.8 PDF Reference

Manage identity provider links

Automation orchestrator tracks external identities as per-provider bindings to local user records. You can view and manage identity provider links from the user detail page.

Each link associates one identity provider account with one local user record. A user can have links to multiple providers and can log in through any of them.

You manage links from the Identities tab on a user's profile. Users can connect or disconnect their own links. Administrators can also transfer links between users.

When you disconnect a link, automation orchestrator revokes all sessions for that user. You cannot remove a user's last sign-in method.

Related concepts
  • How user accounts link to identity providers
Related tasks
  • View identity provider links
  • Connect an identity provider link
  • Transfer an identity provider link
  • Disconnect an identity provider link

View identity provider links

View which external identity providers are linked to a user account.

Procedure

  1. Navigate to System Administration > Access Management > Users.
  2. Select the user.
  3. Select the Identities tab.

Results

The identities table shows connected providers with their issuer URL, linked date, and last authentication date. Unlinked providers appear with a Not connected status.

Connect an identity provider link

Connect an identity provider link from your own profile to authenticate through an external provider.

Procedure

  1. From the My Profile page, select the Identities tab.
  2. From the action menu, select Connect.

    If this is your first identity provider link, a confirmation modal explains how this account is converted to an identity provider account. After confirming:

    • Your password is permanently removed.
    • You are signed out and must sign in using the identity provider.

    Note: This action cannot be undone.

  3. Select Convert and Link.
  4. Sign in using the identity provider.

    After you successfully sign in using the identity provider, the status shows as Connected.

Transfer an identity provider link

As an administrator, transfer an identity provider link to associate a different external identity with a user account.

Before you begin

  • You have admin permissions.

Procedure

  1. On the user detail page, select the Identities tab.
  2. Select Transfer identity.
  3. Select the identity provider from the list.
  4. Log in with the credentials for the identity you want to link to the user.

    The browser redirects to the identity provider for authentication.

  5. After successful authentication, the browser redirects back to automation orchestrator and the identity is displayed as Connected in the identities table.

Disconnect an identity provider link

Disconnect an identity provider link to remove the association between a user account and an external identity.

Before you begin

  • You have the admin role, or you are viewing your own profile.

Procedure

  1. On the user detail page, select the Identities tab.
  2. Select the actions menu for the connected identity you want to remove.
  3. Select Disconnect.
  4. In the confirmation modal, select Disconnect again.

Results

Automation orchestrator prevents removing a user's last sign-in method. All sessions for the user are revoked when an identity is removed.

  • ‹ Delete a user
  • Manage group memberships ›
Red Hat

CONTENT

  • Product documentation
  • Knowledgebase
  • Errata
  • CVEs
  • Product life cycles
  • Security Data API

HELP

  • Contact Red Hat

APP INFO

  • About
  • Release: v1.2.13 2026-09-15
© 2026 Red Hat
  • End user license agreement