Authenticating as a federated user
If you don't have the Yandex.Cloud command line interface, install it.
To authenticate using an SAML-compatible identity federation:
Get your federation ID from your administrator.
Launch the profile creation wizard:
yc init --federation-id=<federation ID>
Select the profile you want to set up authentication for or create a new one.
Welcome! This command will take you through the configuration process. Pick desired action:  Re-initialize this profile 'default' with new settings  Create a new profile
The CLI prompts you to continue authentication in the browser. Press Enter to continue.
You are going to be authenticated via federation-id 'aje1f0hsgds3aas2f6ai2'. Your federation authentication web site will be opened. After your successful authentication, you will be redirected to 'https://console.cloud.yandex.com'. Press 'enter' to continue...
On successful authentication on the federation server, the IAM token is saved in the profile. This token is used to authenticate each operation until the token expires. After that, the CLI again displays a prompt to authenticate in the browser.
Go back to the command-line interface to finish creating the profile.
Select the default folder:
Please choose a folder to use:  folder1 (id = cvatao4faoe2bmdrg22b)  folder2 (id = tao4faoe2cvabmdrg22b)  Create a new folder Please enter your numeric choice: 1
Select the default availability zone for Yandex Compute Cloud:
Do you want to configure a default Yandex Compute Cloud availability zone? [Y/n] Y Which zone do you want to use as a profile default?  ru-central1-a  ru-central1-b  ru-central1-c  Don't set default zone Please enter your numeric choice: 2
View your CLI profile settings:
$ yc config list federation-id: aje1f0hs6ojais2f6ai2 ...