Managed Studio Sign in
Documentation

Settings

Introduction

The Settings page is where you configure how your studio works as a whole, from the AWS account it connects to and the regions your team can use, through to how users sign in and how your subscription is billed. Changes made here apply to everyone in your studio, so Settings is only available to Administrators and Support Engineers.

Open Settings from the main sidebar, then choose a section from the Settings sidebar.

General

Your studio's name and avatar identify the studio throughout Managed Studio.

To update your studio's name or avatar:

  1. Navigate to the Settings page
  2. Click General
  3. Enter a new Studio name
  4. To change the Studio avatar, click Upload file and choose an image. JPG, PNG and WEBP images up to 3 MB are supported
  5. Click Save changes

To remove the avatar, click the bin icon next to it.

AWS credentials

Managed Studio connects to your AWS account using an API Key and Secret. For help creating these, please see Connecting your AWS account.

To update your AWS credentials:

  1. Navigate to the Settings page
  2. Click AWS credentials
  3. Enter the AWS API Key
  4. Enter the AWS API Secret
  5. Click Save changes

Beneath your credentials, AWS IAM Permissions shows whether Managed Studio has all the permissions it needs. If it shows Permissions are incorrect, update the IAM policy in your AWS account, then click Re-verify permissions.

Enabled regions

Machines can only be created in, or imported from, the AWS regions you enable for your team.

To change your enabled regions:

  1. Navigate to the Settings page
  2. Click Enabled regions
  3. Select the regions you want to enable, and clear the ones you do not. You can search by region name or ID, such as London or eu-west-2
  4. Click Save changes

Machine defaults

The default remote connection is the method new machines use for remote access. You can still change it for an individual machine from its edit page.

To change the default remote connection:

  1. Navigate to the Settings page
  2. Click Machine defaults
  3. Choose a Default remote connection, or None
  4. If you chose DCV, choose the Stack. If you chose Custom, enter the Custom remote connection URI
  5. Click Save changes

Security settings

Two-factor authentication adds an extra layer of security to every user's account. You can leave it up to each user, or require it for everyone in your studio.

To change whether two-factor authentication is required:

  1. Navigate to the Settings page
  2. Click Security settings
  3. Choose Not required or Required
  4. Click Save changes

When it is required, users must set up two-factor authentication the next time they sign in.

Single sign-on

This section only appears for studios still using the deprecated OpenID Connect (OIDC) integration with Microsoft Entra ID. It shows the studio's SSO login URL and the configured identity provider, and lets you remove the provider. New studios should use Single sign-on (SAML) instead.

For more information please see Single Sign-On (SSO): Integrating with Microsoft Entra ID.

Single sign-on (SAML)

Single sign-on lets your users sign in with a SAML 2.0 identity provider, such as Google Workspace, Microsoft Entra ID or Okta.

To add an identity provider:

  1. Navigate to the Settings page
  2. Click Single sign-on (SAML)
  3. Click New provider
  4. Follow the setup guide for Google, Microsoft Entra ID or another identity provider

Once a provider is added, the page shows your studio's Single sign-on URL and the date the identity provider certificate expires.

To replace the identity provider certificate:

  1. Download the new certificate from your identity provider
  2. Open the provider's context menu
  3. Click Update certificate
  4. Upload the new certificate
  5. Click Update certificate

To view the Service Provider values your identity provider needs, open the provider's context menu and click Configuration details.

To remove the provider:

  1. Open the provider's context menu
  2. Click Remove integration
  3. Type delete in the confirmation field
  4. Click Remove provider

SAML single sign-on is not included in every plan. If it is not available on yours, the studio owner can upgrade from Billing.

Email domains

Verifying your email domains lets you choose whether single sign-on is disabled, optional or required for everyone on each domain.

To add a domain:

  1. Navigate to the Settings page
  2. Click Email domains
  3. Click Add domain
  4. Enter the domain, such as acmecorp.com
  5. Click Add domain
  6. Add the TXT record shown to your domain's DNS, then click Check DNS record

For the full guide, including choosing how users sign in and removing a domain, please see Single Sign-On (SSO) SAML: Configure one or more email domains for your studio.

Billing

Your Managed Studio subscription is managed through Stripe. Only the studio owner can see this section.

To choose a plan:

  1. Navigate to the Settings page
  2. Click Billing
  3. Click Buy plan on the plan you want

If your studio already has a subscription, Billing shows your current plan. To manage your subscription and invoices:

  1. Navigate to the Settings page
  2. Click Billing
  3. Click Manage subscription

You will be redirected to Stripe to make your changes.