Authentication - User Guide - BlueCat Horizon

BlueCat Horizon's authentication service manages user identities and authorization across the platform and its applications. BlueCat Horizon uses Auth0 to authenticate local users, and manage logins and integrate with identity service providers, like Microsoft Entra ID and Okta.

BlueCat Horizon distinguishes between two types of users:

• Local users: Authenticated via credentials provisioned by BlueCat
• External users: Authenticated by an external service provisioned through a single sign-on (SSO) connection

For information about managing local user accounts, refer to Users.

A root user is created by default, which can create local user accounts and set up an SSO connection with an external identity provider. Once an SSO connection is set up and a user logs in through SSO, an external user account is created in BlueCat Horizon and added to the Users list. External users cannot be added, edited, or deleted directly in BlueCat Horizon. Any changes to external users with access to the platform must be made through your external identity provider. For more information about managing external users through SSO, refer to Configuring groups and roles for external users.