Skip to navigationSkip to content

Featured links

  • Support
  • Console
  • Developers
  • Start a trial
    • For customers
      • Customer support
      • Subscription management
      • Support Cases
      • Red Hat Ecosystem Catalog
      • Find a partner
    • For partners
      • Partner portal
      • Partner support
      • Become a partner
    • Try, buy, & sell
      • Red Hat Store
      • Contact Sales
      • Start a trial
    • Learning resources
      • Training and certification
      • Hybrid cloud learning hub
      • Interactive labs
      • Learning community
      • Red Hat TV
      • Architecture Center
    • Open source communities
      • Global advocacy
      • How we contribute
Red Hat Documentation
  • AI
  • Learn
  • Documentation
  • Resources
SupportConsoleDevelopersStart a trialContact

Red Hat Ansible Automation Platform — automation orchestrator

Table of contents

What's new
  • Automation orchestrator release notes
    • API changelog
    • New features and enhancements
    • Breaking changes
    • Known issues
    • Common Vulnerabilities and Exposures (CVE) fixes
    • Bug fixes
  • Developer Preview features
Discover
  • What is automation orchestrator?
    • Workflow concepts
    • Agentic steps in a workflow
Get started
  • What is the workflow designer?
    • Understand the workflow designer
    • Find your way around the user interface
  • Create your first workflow
    • Workflow planning and prerequisites
    • Add a trigger step
    • Add workflow steps
    • Arrange and connect the steps
    • Run and monitor your workflow
Plan
  • Choose a deployment model
  • Understand the Ansible Automation Platform co-located topology
  • Understand the independent topology
  • Understand the air-gapped topology
  • Automation orchestrator operator-managed NetworkPolicies
Install
  • Install and manage automation orchestrator
    • Understand release channels
    • Plan your installation
    • Automation orchestrator system requirements
    • Prepare the installation environment
    • Understand aapctl
      • Download aapctl
    • Install with aapctl
    • Customize the aapctl installation
    • Enable OpenTelemetry collection with aapctl
    • Generate aapctl manifests for GitOps
    • Understand aapctl manifest application order
    • Install the operator from the OpenShift CLI
    • Install the operator from the web console
    • Create an instance from the web console
    • Create an instance from the CLI
    • Custom resource field reference
    • Retrieve the initial admin password
    • Monitor the deployment
    • Upgrade automation orchestrator
    • Uninstall automation orchestrator
  • Perform day-2 operations
    • Scale automation orchestrator components
    • Manage automation orchestrator from the command line
    • Rotate the credential encryption key
    • Understand internal TLS
    • Provide your own internal TLS certificates
      • Provide internal TLS certificates with cert-manager
    • Rotate internal TLS certificates
    • Back up automation orchestrator
    • Understand the automation orchestrator restore process
    • aapctl command reference
    • Installation reference
    • Release channel and version reference
Develop
  • Start workflows with triggers
    • Understand workflow triggers
    • Add a manual trigger
    • Add a webhook trigger
    • Add an Event-Driven Ansible trigger
    • Schedule a workflow with a cron expression
    • Schedule a workflow with a visual schedule
    • Identify the trigger for a workflow run
  • Add task agents to workflows
    • Understand task agent nodes in workflows
    • Add a task agent step
    • Delete an uploaded context file permanently
    • Review task agent reasoning and tool calls
    • Common task agent step patterns
    • Use task agent best practices
  • Add human oversight to workflows
    • Understand workflow approvals
    • Add an approval step to a workflow
    • Respond to an approval from the Approvals page
    • Respond to an approval from the execution viewer
    • Approve or reject multiple approval requests
  • Add action steps to workflows
    • Understand REST API steps
    • Add a REST API step to a workflow
  • Add Ansible Automation Platform to workflows
    • Understand Ansible Automation Platform execution steps
    • Add an Ansible Automation Platform job template step
    • Add an Ansible Automation Platform workflow template step
    • Understand inputs and outputs for Ansible Automation Platform steps
    • Use job output in a downstream step
    • Run Ansible Automation Platform across multiple environments
  • Control workflow execution
    • Understand control flow steps
    • Add a wait step to a workflow
    • Add a conditional step to a workflow
    • Add a switch step to a workflow
    • Add a converge step to a workflow
    • Add a For each loop step to a workflow
    • Add a While loop step to a workflow
    • Loop step drag behavior on the canvas
    • Loop context and iteration variables
    • Common loop patterns
    • Connect steps and pass data between them
  • Test workflows with real or mock data
    • Understand testing individual workflow steps
    • Supported step types for testing
    • Test with real data
    • Understand mock data for step testing
    • Test with mock data
    • Mock data examples for control flow steps
  • Save, publish, and manage workflow versions
    • Understand workflow versioning and publishing
    • Publish a workflow version
    • Unpublish a workflow
    • Duplicate a workflow
    • Delete a workflow
    • View workflow version history
    • Roll back to a previous workflow version
    • Resolve a workflow version conflict
    • Look up workflow version API endpoints
  • Validate workflows
    • Understand workflow validation
    • Check your workflow for errors before publishing
    • Save a workflow that has validation issues
    • Validate a workflow definition without saving
    • Common workflow validation errors
  • Share and promote workflows
    • Understand exporting and importing workflows
    • Export a workflow
    • Import from the Workflows page
    • Import from the Workflow Builder
    • Troubleshoot workflow imports
  • Use case: Automated incident remediation
    • Understand automated web service remediation workflows
    • Build a workflow to remediate web service failures
  • Integrate with the REST API
    • Interact with automation orchestrator programmatically
    • Get started with the REST API
    • Access and use the OpenAPI specification
    • Integrate external systems with the REST API
    • Determine required API permissions
    • Format API requests and interpret responses
    • Paginate, filter, and sort API results
    • Interpret REST API error responses
    • Manage workflows through the API
    • Credential API endpoints
    • Troubleshoot REST API requests
    • Understand API rate limiting
    • Plan for API version changes
    • Discover the current API version
Configure
  • Secure and govern the platform
    • Understand policy-based access control
    • Organize users and resources into groups and projects
    • Understand resource deletion behavior
  • Authenticate users and systems
    • Choose an authentication method
    • Session and token behavior
    • User provisioning
    • How user accounts link to identity providers
    • Group memberships
    • Manage the built-in administrator
      • Log in with the built-in administrator
      • Built-in account protections
      • Disable the built-in administrator
      • Re-enable the built-in administrator
      • Disable local login for non-built-in users
      • Re-enable local login for non-built-in users
    • Add Ansible Automation Platform as an identity provider automatically
    • Add a generic OIDC identity provider
    • Manage identity providers
    • Manage groups
    • User and group management
      • Filter users by authentication method
      • Create a local user
      • Delete a user
      • Manage identity provider links
      • Manage group memberships
    • Session management
      • Enable single logout
      • Understand logout behavior
      • Revoke sessions
      • Permission change propagation
    • Authentication security
    • Authentication API reference
    • Authentication configuration reference
  • Configure integrations
    • Integrations in the automation orchestrator
    • Allow internal service URLs for integrations
    • Configure an LLM provider integration
    • Configure an Ansible Automation Platform integration
    • Configure an MCP server integration
    • Test integration connections
    • Monitor integration health status
    • Integration configuration field reference
    • Troubleshoot integration health issues
  • Manage built-in workflows and background execution
    • Understand built-in workflows
    • View built-in workflows
    • Configure background worker scaling
    • Background execution reference
Secure
  • Control access with policies and roles
    • Control access with predefined roles
    • Define access rules with policies
    • Create a custom role
    • Assign a role
    • Remove a role assignment
    • How permission inheritance works
    • View effective permissions
    • Authorization API reference
  • Manage credentials to secure your automation workflows
    • Understand credential management
    • Choose a credential type
    • Create and manage credentials
    • Attach credentials to workflow nodes
    • Secure credential storage and encryption
  • Enable programmatic API access with service accounts
    • Understand service accounts
    • Create a service account
    • Assign RBAC roles to a service account
    • Delegate service account access across projects
    • Authenticate with client credentials
    • Rotate a service account secret
    • Disable a service account
    • Disable a service account credential
    • Delete a service account
    • Identify unused service accounts
    • Service account API reference
Observe
  • Monitor audit events
    • Understand audit logging
    • Understand audit event delivery
    • Audit data retention reference
    • Configure OTLP forwarding
    • Audit event reference
    • Authorization audit events
    • Authentication audit events
    • Service account audit events
  • Access operational logs
    • Understand operational logs
    • Configure log levels
    • Operational log data reference
  • Collect and view logs in-cluster
    • Understand in-cluster logging
    • Deploy the OpenShift Logging stack
    • Configure in-cluster log emission
    • View events in the OpenShift console
  • Monitor workflow runs
    • Identify workflow execution statuses
    • Monitor workflow runs
  • Understand collected telemetry data
    • Understand automation orchestrator observability
    • How automation orchestrator protects telemetry privacy
    • Analytics telemetry runtime settings
    • Review collected analytics data
  • Monitor platform health with Prometheus metrics
    • Understand Prometheus metrics
    • Send metrics to an external monitoring system
    • OpenTelemetry endpoint URL requirements
    • Integrate metrics with OpenShift monitoring
    • Troubleshoot Prometheus metrics collection
    • Prometheus metrics reference
Optimize
  • Manage global application runtime settings
    • Understand global application runtime settings
    • Configure application runtime settings
    • Reset a single runtime setting
    • Reset all runtime settings in a category
    • UI Reference: Application runtime settings
    • API Reference: Application runtime settings
Troubleshoot
  • Troubleshoot with logs and diagnostics
    • Collect diagnostic information for support
    • Troubleshoot installation
      • Redeploy over an existing database
    • Troubleshoot credential errors
    • Troubleshoot authorization
    • Troubleshoot authentication
  • Troubleshoot workflow runs
    • Troubleshoot failed workflow runs
    • Resolve common workflow failures
Reference
  • Node type catalog
    • Node type catalog, settings, and common output fields
Download PDF
  • Red Hat Ansible Automation Platform — automation orchestrator 2026.8 PDF Reference
  1. Home
  2. Products
  3. Red Hat Ansible Automation Platform — automation orchestrator
  4. Authenticate users and systems
  5. User and group management
  6. Manage identity provider links

Manage identity provider links

Open Table of contents

On this page

View identity provider linksProcedureResultsConnect an identity provider linkProcedureTransfer an identity provider linkBefore you beginProcedureDisconnect an identity provider linkBefore you beginProcedureResults

On this page

View identity provider linksProcedureResultsConnect an identity provider linkProcedureTransfer an identity provider linkBefore you beginProcedureDisconnect an identity provider linkBefore you beginProcedureResults

Manage identity provider links

Automation orchestrator tracks external identities as per-provider bindings to local user records. You can view and manage identity provider links from the user detail page.

Each link associates one identity provider account with one local user record. A user can have links to multiple providers and can log in through any of them.

You manage links from the Identities tab on a user's profile. Users can connect or disconnect their own links. Administrators can also transfer links between users.

When you disconnect a link, automation orchestrator revokes all sessions for that user. You cannot remove a user's last sign-in method.

Related concepts
  • How user accounts link to identity providers
Related tasks
  • View identity provider links
  • Connect an identity provider link
  • Transfer an identity provider link
  • Disconnect an identity provider link

View identity provider links
Copy linkLink copied!

View which external identity providers are linked to a user account.

Procedure
Copy linkLink copied!

  1. Navigate to System Administration > Access Management > Users.
  2. Select the user.
  3. Select the Identities tab.

Results
Copy linkLink copied!

The identities table shows connected providers with their issuer URL, linked date, and last authentication date. Unlinked providers appear with a Not connected status.

Connect an identity provider link
Copy linkLink copied!

Connect an identity provider link from your own profile to authenticate through an external provider.

Procedure
Copy linkLink copied!

  1. From the My Profile page, select the Identities tab.
  2. From the action menu, select Connect.

    If this is your first identity provider link, a confirmation modal explains how this account is converted to an identity provider account. After confirming:

    • Your password is permanently removed.
    • You are signed out and must sign in using the identity provider.

    Note: This action cannot be undone.

  3. Select Convert and Link.
  4. Sign in using the identity provider.

    After you successfully sign in using the identity provider, the status shows as Connected.

Transfer an identity provider link
Copy linkLink copied!

As an administrator, transfer an identity provider link to associate a different external identity with a user account.

Before you begin
Copy linkLink copied!

  • You have admin permissions.

Procedure
Copy linkLink copied!

  1. On the user detail page, select the Identities tab.
  2. Select Transfer identity.
  3. Select the identity provider from the list.
  4. Log in with the credentials for the identity you want to link to the user.

    The browser redirects to the identity provider for authentication.

  5. After successful authentication, the browser redirects back to automation orchestrator and the identity is displayed as Connected in the identities table.

Disconnect an identity provider link
Copy linkLink copied!

Disconnect an identity provider link to remove the association between a user account and an external identity.

Before you begin
Copy linkLink copied!

  • You have the admin role, or you are viewing your own profile.

Procedure
Copy linkLink copied!

  1. On the user detail page, select the Identities tab.
  2. Select the actions menu for the connected identity you want to remove.
  3. Select Disconnect.
  4. In the confirmation modal, select Disconnect again.

Results
Copy linkLink copied!

Automation orchestrator prevents removing a user's last sign-in method. All sessions for the user are revoked when an identity is removed.

Delete a user
Manage group memberships
On this page
View identity provider linksProcedureResultsConnect an identity provider linkProcedureTransfer an identity provider linkBefore you beginProcedureDisconnect an identity provider linkBefore you beginProcedureResults
Back to top
Red Hat logoGithubRedditYoutubeTwitter

Learn

  • Developer resources
  • Cloud learning hub
  • Interactive labs
  • Training and certification
  • Customer support
  • See all documentation

Try, buy, & sell

  • Product trial center
  • Red Hat Ecosystem Catalog
  • Red Hat Store
  • Buy online (Japan)

Communities

  • Customer Portal Community
  • Events
  • How we contribute

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Legal Notice

Theme

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility
Back to top