Configure logon methods

Logon methods

On this tab, you can enable or disable Enterprise Identity Source and adjust their display order.

Differences between an organization ID and an office network ID

When end users log on to an Alibaba Cloud Workspace terminal, they can use an office network ID or an organization ID. Logging on with an organization ID provides access to cloud computers across all office networks. The following list describes which Alibaba Cloud Workspace terminals support logon with an organization ID:

• For convenience accounts, all Alibaba Cloud Workspace terminals support logon with an organization ID.

• For enterprise AD accounts, the following Alibaba Cloud Workspace terminals support logon with an organization ID: Windows client and macOS client (V6.4 or later), and hardware terminals (V6.8 or later).

You can enable various logon and security verification methods for both organization IDs and office network IDs. However, the supported features differ. The following table outlines these differences, using a convenience office network as an example.

Configure logon verification methods

You can set logon verification methods for an organization ID and an office network separately. The settings for each are independent and do not affect each other.

• If you log on to an Alibaba Cloud Workspace terminal with an organization ID, the verification methods configured for the organization ID are applied.

• If you log on to an Alibaba Cloud Workspace terminal with an office network ID, the verification methods configured for the office network ID are applied.

Manage logon methods for an organization ID

If multiple logon methods are configured for an organization ID, follow these steps to set their visibility and display order on the Alibaba Cloud Workspace terminal interface.

1. Log on to the Elastic Desktop Service Enterprise console.

2. In the left-side navigation pane, choose Users > Logon Settings.

3. On the Logon page, on the General Configure tab, enable or disable logon methods in the Authentication Method section as needed.

Modify an organization ID

You can modify your organization ID only after your Alibaba Cloud account completes enterprise verification. The modification must be based on your enterprise verification information. For more information about enterprise verification, see Enterprise real-name verification.

1. Log on to the Elastic Desktop Service Enterprise console.

2. Choose an entry point:

   Modify on the Overview page

   1. In the navigation pane on the left, click Overview.

   2. In the My Cloud Computer section of the Overview page, click Modify to the right of the current organization ID.

   Modify on the Logon Settings page

   1. In the left-side navigation pane, choose Users > Logon Settings.

   2. On the General tab of the Logon page, click Settings to the right of Organization ID.

3. In the Organization ID dialog box, enter an organization ID that meets the requirements, and then click OK.

   Note

   • The ID must be 5 to 15 characters in length. It can contain letters (case-insensitive), digits, and the following special characters: ~#$%&:'_-+=|(){}[]<>. The ID cannot start with a special character.

   • You can modify the ID only once every 15 days.

Usage notes

• Supported clients

  This feature is supported only on the Windows client.

• How it works

  • After you enable or disable immersive mode, the end user receives a prompt to restart the local device upon their next successful logon to the terminal. The end user must click Restart for the device to restart and enter immersive mode.

    Note

    The end user must click Restart in the client pop-up window for the change to take effect. Restarting the device using the local device's restart function will not work.

  • This feature modifies the Windows registry information on the end user's local device. If the feature does not take effect, it may be blocked by security software on the local device.

• Impact and scope

  • After immersive mode is enabled, the end user cannot return to the local operating system from the client interface. They also cannot use local operating system features, such as opening the Control Panel, Task Manager, browser, or network settings.

  • This setting affects all users in your organization.

Procedure

1. Log on to the Elastic Desktop Service Enterprise console.

2. In the left-side navigation pane, choose Users > Logon Settings.

3. On the Logon page, click the General tab. To the right of Logon Settings, click Modify Logon Configurations.

4. In the Modify Logon Configurations panel, go to the Immersive Mode section and turn on the Use Immersive Mode After Client Logon switch.

1. Log on to the Elastic Desktop Service Enterprise console.

2. In the left-side navigation pane, choose Users > Logon Settings.

3. On the Logon page, click the General tab. To the right of Logon Settings, click Modify Logon Configurations.

4. In the Modify Logon Configurations panel, complete the following configurations and click OK.

   Parameter	Description
   Timeout-triggered automatic logout	You can enable or disable this.
   Timeout period	The duration for which an end user is not connected to any cloud resources on the Alibaba Cloud Workspace terminal. This option is visible when Timeout-triggered Automatic Logout is enabled.
   Applicable terminals	The Alibaba Cloud Workspace terminals to which this feature applies. Note If you select Alibaba Cloud Workspace Hardware Terminal, note that this feature only takes effect on hardware terminals of V7.5 and later. If the hardware terminal is configured for password-free logon, timeout-triggered automatic logout does not take effect.

   Note

   • After you configure timeout-triggered automatic logout for the client, the setting takes effect the next time the end user logs on.

   • Before the timeout period is reached, the end user receives a reminder. The user can choose to stop the process. If the user takes no action, the client automatically logs out.

1. Log on to the Elastic Desktop Service Enterprise console.

2. In the left-side navigation pane, choose Users > Logon Settings.

3. On the Logon page, click the General tab. To the right of Logon Settings, click Modify Logon Configurations.

4. In the Modify Logon Configurations panel, complete the following configurations and click OK.

   Parameter	Description
   Concurrent terminal limit	You can enable or disable this.
   Number of terminals/clients a user can log on to	The maximum number of Alibaba Cloud Workspace terminals (1 to 10) that an end user can log on to simultaneously. This option is visible when Max. Terminals is enabled.

Prerequisites

This feature requires a mobile phone number to receive a verification code. Before using this feature, you must bind a mobile phone number to the corresponding convenience account. To ensure that end users can receive verification codes, make sure the bound mobile phone number is correct. You can bind a mobile phone number in one of the following two ways:

• Bind a mobile phone number when you create a convenience account. For more information, see Create a convenience account.

• If you have already created a convenience account, find the target user on the User tab of the User Management page. Then, set or modify the phone number in the Mobile Number column.

Procedure to enable

1. Log on to the Elastic Desktop Service Enterprise console.

2. In the left-side navigation pane, choose Users > Logon Settings.

3. On the Logon page, click the General tab. To the right of Logon Settings, click Modify Logon Configurations.

4. In the Logon Settings panel, set SMS Logon to Enabled.