WUYING Terminal:Log on to the Windows or macOS client

Prerequisites

• Cloud resources are assigned to you. After the administrator assigns you a cloud computer, you can obtain logon credentials, such as the office network ID, organization ID, username, and password, from the inbox of the email address specified by the administrator.

• The client is installed. For more information, see Obtain and install a Windows client or macOS client.

Procedure

1. Open the Windows client, select Enterprise Edition in the upper part of the page, select the service agreement check box, enter an organization ID or office network ID from the received logon credentials, and then click the icon.

2. Enter the username and password, and then click the icon.

   Note

   If you log on to the client for the first time, use the initial password provided. You will then be prompted to specify a new password by following on-screen instructions. The initial password is valid for three days. If the initial password expires, click Forgot password to obtain a new initial password.

   

   After you log on to the client, cloud resources, such as cloud computers, that your administrator assigns to you are displayed.

3. On the cloud resource list, click the connect icon on a cloud resource card to use the resource.

Background information

Roles of Alibaba Cloud Workspace users fall into the following categories:

• End users: individuals who access cloud computers from Alibaba Cloud Workspace terminals. Example: Jack, a designer from a design company.

• Administrators: O&M personnel who are responsible for resource purchase and renewal, resource creation and assignment, policy creation and binding, O&M and monitoring, and end user management. Example: Steven, the IT administrator of the company in which the designer Jack works.

Prerequisites

• A user account is created for you and a cloud computer is assigned to the account. If you are an administrator, purchase and assign cloud resources as described in the following topics.

  • Create cloud computers

  • Assign cloud computers to users

• Logon credentials are obtained. After the administrator purchases and assigns EDS resources to you, you can receive logon credentials as an end user, such as the office network ID, organization ID, username, and password. The query methods of logon credentials vary based on the account type and the account activation type.

  Note

  For information about account types and their differences, see the "Account systems" section of the Overview topic.

  • Convenience accounts

    • Administrator-activated: Administrators configure logon credentials and password reset notifications in the EDS console and deliver the logon credentials to end users offline.

    • User-activated: End users can obtain the logon credentials and password reset notifications from their inboxes of the email addresses specified by the administrator.

  • Enterprise Active Directory (AD) accounts: Administrators deliver the logon credentials to end users offline.

Procedure

1. Launch the Windows client.

2. Select Enterprise Edition in the upper-left corner and select the agreement check box in the lower part of the logon page.

3. Select a logon method.

   Username-password logon

   On the logon page, the username-password logon is used by default. If another logon method is displayed and you want to switch to the username-password logon method, click Account Sign-in.

   1. Enter the organization ID or office network ID and click the icon to proceed.

      Note

      Logon with an organization ID allows access to all Alibaba Cloud Workspace resources within the current user account, regardless of the office network to which each resource belongs. However, logon with an office network ID allows access only to the Alibaba Cloud Workspace resources in a specific office network within the current user account. For more information, see the "Compare office network IDs and organization IDs" section of the Configure logon settings topic.

   2. Perform one of the following operations based on SSO is enabled for the organization ID or the office network:

      What is SSO?

      SSO is a secure communication technology that helps users quickly access multiple application systems. SSO implements logon based on identity federation. It allows users to access all trusted systems after the users log on to one of the systems.

      • If SSO is disabled, enter the username and your custom password, and click the icon to proceed. If you want to be automatically logged on without the need to enter the username and password in the following period of time, select Auto Sign-in.

        Note

        • The first time you log on to the Alibaba Cloud Workspace client, use the initial password. Then, you are prompted to specify a new password by following the on-screen instructions. The next time you log on to the client, use the new password.

        • The initial password is valid for three days. If the initial password expires or you forget your custom password, click Forgot Password to reset the password as prompted.

        Important

        If you enter an incorrect password for 10 consecutive times, the account is locked for 20 minutes.

      • If SSO is enabled, enter the SSO username and password as prompted, and click the icon to proceed.

4. Conditional. If your administrator has enabled MFA for your cloud computer, enter the security code that is generated by the associated virtual MFA device.

   What is MFA?

   MFA is a simple and effective authentication method designed to enhance security. After you enable MFA for office networks or organization IDs, end users must associate their accounts to virtual MFA devices the first time they log on to Alibaba Cloud Workspace terminals. Then, the next time they log on to the terminals, the system authenticates user identities based on the following factors:

   • First factor: the username and password

   • Second factor: the verification code generated by the virtual MFA device

   Elastic Desktop Service (EDS) supports software-based virtual MFA devices. You can install virtual MFA devices such as the Alibaba Cloud app on your mobile phone.

   For more information about MFA, see Configure MFA.

   Note

   Before you use MFA, associate a virtual MFA device with your account as prompted. Alibaba Cloud Workspace supports various virtual MFA applications, such as Alibaba Cloud App and Google Authenticator App, that run based on the time-based one-time password (TOTP) algorithm.

5. Conditional. If your administrator has enabled client logon verification, obtain the verification code that is sent to your associated email address and enter the verification code when you use a new logon device.

   Note

   The client logon verification feature applies only when you access your cloud computer over the Internet. The feature does not apply if you access your cloud computer over an Alibaba Cloud virtual private cloud (VPC).

6. After you log on to the client, Alibaba Cloud Workspace services are displayed as cards or icons. Click a card or an icon to access Alibaba Cloud Workspace services.

   Note

   • If only one cloud computer exists in your account and the cloud computer is in the Running state, the cloud computer is automatically connected after you log on to the client. If you want to disable the automatic connection feature before you log on to the client, click the icon in the upper-right corner of the logon page and select Settings. Alternatively, you can click the icon in the upper-right corner of the resource page after you log on to the client. Then choose Settings > General > Sign-in and clear the Automatically connect if it is running option.

   • If your cloud computer is in the Stopped state, click the icon to proceed. You can connect to it only when it is in the Running state.

FAQ

For information about how to resolve this issue, see FAQ about clients.

What to do next

For information about how to configure and use the client, see Configure and use a Windows client or a macOS client.