Web client

Prerequisites

Your administrator has assigned cloud resources to you. You can find your sign-in credentials, including your organization ID or office network ID, username, and password, in the email or phone number specified by your administrator.

Procedure

1. Open the Alibaba Cloud Workspace web client. At the top of the page, select Enterprise & Business. Select the checkbox to agree to the terms of service, enter the organization ID or office network ID from your logon credentials, and then click the icon.

2. Enter your Username and Password, and then click the icon.

   Note

   When you sign in for the first time, enter the initial password from your logon credentials and follow the on-screen instructions to set a custom password. Use this new password for future sign-ins. The initial password is valid for three days. If it expires, click Forgot password to get a new initial password.

   After sign-in, the client displays your assigned cloud resources, such as cloud computers and cloud applications.

3. On the cloud resource list, click the connect icon on a resource card to begin your session.

Background

Limitations

The following limitations apply when you use the web client in a browser:

• Use Chrome, Firefox, Edge, or Safari.

• Only internet connections are supported. Private network connections are not supported.

• Local disk mapping is not supported. Even if it is enabled in the security policy associated with a cloud computer, you cannot read from or write to local disks from the cloud computer.

To avoid these limitations, use the Windows client or macOS client. For more information, see Install and update the desktop client.

Prerequisites

• An administrator has created an end user account for you and assigned it Alibaba Cloud Workspace resources, such as cloud computers and cloud applications. If you are an administrator, you must first purchase and assign cloud resources as described in the following topics:

  • Elastic Desktop Service (EDS)

    • Create a cloud computer

    • Assign a cloud computer to a user

  • App Streaming

    • Publish a delivery group

    • Manage users

• You have obtained the login credentials required to log in to the client. After an administrator purchases and assigns Alibaba Cloud Workspace resources, you will receive login credentials, including an organization ID or office network ID, a username, and a password. How you find your login credentials depends on the end user account type and activation type created by the administrator:

  Note

  For more information about end user account types and their differences, see End user account systems.

  • Convenience account

    • Administrator-activated: The administrator configures the credentials and password reset notifications in the EDS console and provides them to the end user offline. App Streaming supports only administrator-activated convenience accounts.

    • User-activated: Credentials and password reset notifications are sent to the end user's email address or phone number.

  • Enterprise Active Directory (AD) account: The administrator provides the credentials to the end user offline.

Procedure

1. Open the Alibaba Cloud Workspace web client.

2. At the top of the page, select Enterprise Edition & Business Edition and agree to the privacy policy at the bottom.

3. Select a sign-in method.

   Account sign-in

   By default, the account sign-in method is selected. If not, click Account Sign-in.

   1. Enter the organization ID or office network ID from your credentials, and then click the icon.

      Note

      When you sign in with an organization ID, you can access all Alibaba Cloud Workspace resources under your account, regardless of which office network they belong to. When you sign in with an office network ID, you can access only resources that belong to that specific office network. For more information about the differences, see Configure sign-in methods.

   2. Perform one of the following actions depending on whether an administrator has enabled single sign-on (SSO) for an organization ID or an office network:

      What is single sign-on (SSO)?

      Single sign-on (SSO) is a secure authentication method that allows users to access multiple trusted applications and services with a single set of credentials. It is also known as federated identity sign-on.

      • If SSO is disabled, enter your username and custom password, and then click the icon. To remain signed in for a period of time, select Auto Sign-in.

        Note

        • On your first sign-in, enter the initial password from your credentials and follow the prompts to set a custom password. Use this custom password for all future sign-ins.

        • The initial password is valid for three days. If you are notified that your password has expired, or if you forget your custom password, click Forgot Password and follow the prompts to reset it.

        Important

        Enter the correct password when you sign in. If you enter an incorrect password 10 consecutive times, your account will be locked for 20 minutes.

      • If SSO is enabled, enter your SSO username and password as prompted, and then click the icon.

   Text message sign-in

   Note

   If your administrator has enabled the text message sign-in feature, you can also sign in to the client by using the phone number associated with your account and a verification code sent to that number. For information about how an administrator enables this feature, see Sign in with a text message verification code.

   Click Sign in with Text Message, enter your phone number, and click Get Code. Then, enter the verification code from the text message and click the icon. To remain signed in for a period of time, select Auto Sign-in.

   QR code sign-in

   If you are already logged in to the Android client or iOS client, you can log in by scanning a QR code.

   1. Open the Android client or iOS client where you are already signed in. In the upper-right corner of the cloud resource list, tap the icon and scan the QR code on the desktop client's sign-in screen.

      Note

      Only versions 7.0 and later of the Android client or the iOS client support QR code scanning.

   2. On the Confirmation screen of your Android client or iOS client, tap Confirm Sign In.

4. (Conditional) If your administrator enabled multi-factor authentication, enter the dynamic password from your virtual MFA device or the verification code received by text message or email.

   What is multi-factor authentication (MFA)?

   MFA is a simple and effective security practice. After you enable MFA at the office network or organization ID level, the system verifies two factors each time a user logs on:

   • First factor: The end user's username and password.

   • Second factor: A dynamic code from a virtual MFA device or a verification code sent via SMS or email.

     Note

     Virtual MFA: The Time-based One-Time Password (TOTP) algorithm is a widely adopted multi-factor authentication protocol. Applications on a mobile phone or another device that support TOTP, such as the Alibaba Cloud App, Google Authenticator, and Microsoft Authenticator, are known as virtual MFA devices. If you enable a virtual MFA device, Alibaba Cloud requires you to enter the 6-digit dynamic code generated by the application when you log on. This prevents unauthorized logins that may result from a stolen password.

   For more information about MFA, see Set up multi-factor authentication (MFA).

   Note

   If your IT administrator enables TOTP-based dynamic passwords, follow the on-screen prompts to bind a virtual MFA device the first time you go through this process. You can use any TOTP-generating virtual MFA application, such as the Alibaba Cloud app or Google Authenticator app.

5. After you sign in, your Alibaba Cloud Workspace resources are displayed as cards or icons. Click a resource icon to connect to it.

   Note

   If a cloud computer is in the stopped or hibernated state, you must start or wake it before you can connect.

FAQ

For more frequently asked questions, see Client FAQ.