Security & Cloud Identities

Security and cloud identity configuration for CARTO Self-Hosted

This section covers authentication, identity federation, and access control configuration for your CARTO Self-Hosted deployment.

Configure Single Sign-On (SSO)

Connect CARTO to your identity provider using SAML or OIDC.

Cloud Identities

Grant CARTO access to cloud services without long-lived credentials (GKE Workload Identity, EKS Pod Identity).

Configure your custom service account

Use a custom GCP service account for CARTO workloads.

Enable BigQuery OAuth connections

Allow users to connect to BigQuery using their own Google credentials.