Access Control

Authentication and role-based access control for Develocity, covering how users sign in, how their accounts are provisioned, and what they are allowed to access.

Develocity supports both locally managed user accounts and permissions and external management via an LDAP service or a SAML 2.0 identity provider. CI workloads can authenticate with short-lived OIDC tokens through workload identity federation, instead of long-lived access keys.

Initial setup can be performed by the system user. Subsequently, any user with the Configure access control permission can configure access control.

Manage the built-in administrative account used for initial setup and recovery.

Identity Provider

Configure an external identity provider.

Workload Identity

Authenticate CI workloads with short-lived OIDC tokens instead of access keys.

User Provisioning

Govern the automated lifecycle of user accounts via your identity provider.

Permissions and Roles

Define roles and permissions to keep the system secure.

Project-Level Access Control

Apply security constraints to individual projects.

Anonymous Access

Configure permissions for unauthenticated users.