You can log on to the Alibaba Cloud Management Console as a Resource Access Management (RAM) user by using several methods. Depending on your security requirements and preferences, you can log on with a username and password or a passkey.
RAM user logon methods
RAM provides several logon methods. You can choose the one that is most convenient for you.
General logon pages:
Visit the RAM User Logon page directly.
From the Alibaba Cloud account logon page, click Sign In with a RAM User.
Account-specific logon URL (Recommended): If you know your account's default logon suffix (such as,
@company-alias.onaliyun.com), you can use a dedicated URL to directly go to your account's logon page. This saves you from having to enter the account identifier manually. For more information about how to view or change the default logon suffix, see Manage the logon suffixes of RAM users.URL format:
https://signin.alibabacloud.com/<Your-Default-Logon-Suffix>/login.htmLog on to the RAM console using your Alibaba Cloud account. On the Overview page, you can find the RAM user logon URL and share it with other users.
RAM user-specific logon URL (Recommended): You can specify
username=RAM-Username@<Your-Default-Logon-Suffix>in the logon URL to pre-fill the username. Then, you only need to enter your password to proceed.URL format:
https://signin.alibabacloud.com/login.htm?username=RAM-Username@<Your-Default-Logon-Suffix>
Method 1: Log on with a username and password
Follow these steps to log on by using the general logon page.
Navigate to the RAM User Logon page.
Enter your user logon name in the format
<RAM-Username>@<Default-Logon-Suffix>or<RAM-Username>@<Custom-Logon-Suffix>, and click Next. For more information about how to view or change the default and custom logon suffix, see Manage the logon suffixes of RAM users.
Enter your password, and click Log On.
(Optional) If multi-factor authentication (MFA) is enabled for your RAM user, you are prompted to enter an authentication code from your MFA device. For more information, see Bind an MFA device to a RAM user.
Method 2: Log on with a passkey
A passkey provides a secure, passwordless authentication method. It allows you to log on by using your device's built-in authenticator, such as biometrics (fingerprint or face recognition) or a local PIN.
Prerequisites
Administrator configuration: An administrator must enable the option that allows RAM users to log on with passkeys. This setting is enabled by default for new accounts. To change this setting:
Log on to the RAM console using an Alibaba Cloud account or as a RAM administrator (a RAM user with the
AliyunRAMFullAccesspolicy attached).On the Settings page, in the Security section, click Modify.
In the Security panel, turn on Allow Users to Log on with a Passkey.
User passkey registration: You must have already registered a passkey (such as Touch ID or Windows Hello) for your RAM user. For more information, see Register a passkey or security key for a RAM user.
Logon steps
Navigate to the RAM User Logon page.
Enter your user logon name in the format
<RAM-Username>@<Default-Logon-Suffix>or<RAM-Username>@<Custom-Logon-Suffix>, and click Next. For more information about how to view or change the default and custom logon suffix, see Manage the logon suffixes of RAM users.Click Passkey Logon. If passkey authentication fails, click Logon Using Password to log on with your password instead.
Your browser prompts you to authenticate with your passkey. If you have registered multiple passkeys, select the one that you want to use.
After you successfully authenticate, you are logged on to the console.
FAQ
What should a RAM user do if they forget their logon password?
For security reasons, RAM users cannot reset their own passwords. If a user forgets their password, they must contact an administrator to have it reset. For more information, see Change the logon password of a RAM user.