|
| 1 | +--- |
| 2 | +title: Authenticating to Cockpit's Grafana using IAM |
| 3 | +description: Learn how to transition from Grafana credentials authentication to Scaleway IAM to access your Cockpit's Grafana |
| 4 | +dates: |
| 5 | + validation: 2025-10-01 |
| 6 | + posted: 2025-10-01 |
| 7 | +--- |
| 8 | + |
| 9 | +Starting **November 3rd, 2025**, Cockpit will be integrated with **Scaleway IAM**, allowing you to authenticate to your Cockpit's Grafana using your **Scaleway credentials** instead of Grafana credentials. This page explains how to prepare for the transition. |
| 10 | + |
| 11 | + |
| 12 | +## Reasons for the change |
| 13 | + |
| 14 | +We are simplifying authentication and improving security by: |
| 15 | + |
| 16 | +- Removing the need to manage Grafana-specific users and passwords. |
| 17 | +- Enabling login using your existing **Scaleway credentials**. |
| 18 | +- Allowing central IAM-based access management. |
| 19 | +- Supporting **Multi-Factor Authentication (MFA)**. |
| 20 | + |
| 21 | +## Transition timeline |
| 22 | + |
| 23 | +| Event | Date | |
| 24 | +|------|------| |
| 25 | +| IAM authentication becomes available | **November 3rd, 2025** | |
| 26 | +| Creating new Grafana users disabled | **November 3rd, 2025** | |
| 27 | +| Legacy Grafana user login deprecation | **January 20th, 2026** | |
| 28 | + |
| 29 | +Grafana users not linked to Scaleway IAM will be deprecated. Refer to the table below to find out until when you can perform which actions. |
| 30 | + |
| 31 | +| Action | Available until | |
| 32 | +|--------|-----------------| |
| 33 | +| Logging in using Grafana user credentials | **January 20th, 2026** | |
| 34 | +| Generate passwords for existing Grafana users | **January 20th, 2026** | |
| 35 | +| Create new Grafana users | **Disabled after November 3rd, 2025** | |
| 36 | + |
| 37 | +## What is changing? |
| 38 | + |
| 39 | +From **November 3rd**, you will be able to choose from two authentication methods to log in to Grafana via the Scaleway console: |
| 40 | + |
| 41 | +- IAM authentication |
| 42 | +- Legacy authentication (using Grafana credentials) |
| 43 | + |
| 44 | + <Message type="tip"> |
| 45 | + - Tick the **Remember my choice** checkbox after you have selected your authentication method to avoid being prompted to choose one again. |
| 46 | + - If you have selected an authentication method but would like to switch to the other, you need to **clear your cookies**. The pop-up prompting you to choose an authentication method should display again. |
| 47 | + </Message> |
| 48 | + |
| 49 | +### New login method |
| 50 | + |
| 51 | +From **November 3rd**, you will be able to log in using your Scaleway credentials via the Scaleway console or saved links. |
| 52 | + |
| 53 | +### New dashboard URLs |
| 54 | + |
| 55 | +To support both login methods during the transition, Grafana dashboards will have a **new URL**: |
| 56 | + |
| 57 | +- **Old URL:** |
| 58 | + `https://<project_id>.dashboard.obs.fr-par.scw.cloud` |
| 59 | + |
| 60 | +- **New URL (IAM-authenticated):** |
| 61 | + `https://<project_id>.dashboard.cockpit.scaleway.com` |
| 62 | + |
| 63 | + |
| 64 | +Both links will be functional until **January 20th, 2026**, after which only the new IAM-based URLs will remain valid. |
| 65 | + |
| 66 | +## Who can access your Cockpit's Grafana? |
| 67 | + |
| 68 | +Users must: |
| 69 | + |
| 70 | +- Be **Members** of your Scaleway Organization |
| 71 | +- Have access to the Scaleway Project where the Cockpit is located |
| 72 | +- Have been granted either the `ObservabilityReadOnly`, the `AllProductsFullAccess`, or the `ObservabilityFullAccess` IAM permission set |
| 73 | + |
| 74 | +You can manage Members and permission sets in the [IAM section of the Scaleway console](https://console.scaleway.com/iam/members). |
| 75 | + |
| 76 | + <Message type="tip"> |
| 77 | + Make sure that you review and manage permissions sets granted to current Members of your Organization, to either revoke or grant access accordingly. |
| 78 | + </Message> |
| 79 | + |
| 80 | + |
| 81 | +## How to access your Cockpit's Grafana |
| 82 | + |
| 83 | +### From the Scaleway console |
| 84 | + |
| 85 | +Access to Grafana using the Scaleway console remains the same as before. |
| 86 | + |
| 87 | +1. Click **Cockpit** in the **Monitoring** section of the [console](https://console.scaleway.com/) side menu. The **Cockpit** overview page displays. |
| 88 | +2. Click **Open dashboards** to open your preconfigured dashboards in Grafana. You will be automatically logged in using your Scaleway account. |
| 89 | + |
| 90 | +### From a saved/shared link |
| 91 | + |
| 92 | +You can also access your Cockpit's Grafana using bookmarked links if you cannot access the Scaleway console. |
| 93 | + |
| 94 | +1. Open the new IAM-compatible URL. The Scaleway login page displays. |
| 95 | +2. Log in using your Scaleway credentials. Your Grafana dashboard displays. |
| 96 | + |
| 97 | +## How to prepare for this transition |
| 98 | + |
| 99 | +1. Make sure that you review and manage permissions sets granted to current Members of your Organization, to either revoke or grant access accordingly. |
| 100 | + |
| 101 | + If you have Grafana users who are not in your Scaleway Organization: |
| 102 | + |
| 103 | +2. [Invite them as Members](/iam/how-to/manage-members/#how-to-create-a-member) to your Organization. |
| 104 | +3. Assign the `ObservabilityReadOnly` or the `ObservabilityFullAccess` permission sets only to the Projects they need to access. |
| 105 | + |
0 commit comments