About
Paperspace integrates with Active Directory (AD) domains. Businesses can choose to connect to an AD Domain Controller on-premise, in our cloud, or in a third-party site. We recommend exploring the Networking section to understand how to connect to your dedicated VPN gateway.
Please make sure your Team meets the requirements for features like Active Directory or VPNs before submitting a request.
Scenarios
Completing the AD integration
Paperspace offers the ability to integrate with an AD domain which enables users to authenticate with their domain credentials in the web interface or native application. In this scenario, Paperspace will automatically AD-join machines when the machine is created.
Manually configuring AD (no integration)
If using RDP or similar third-party remote desktop software, completing the integration is not required. In this scenario, team administrators can configure AD manually though users will not be able to use the Paperspace remote desktop technology and machines will not be automatically joined to the domain.
Using an existing Domain Controller versus hosting one on Paperspace
Integrating with an existing AD domain
To get started, domain credentials must be provided (using a secure web-based interface) so the necessary computer accounts can be added. Paperspace employs LDAPS (LDAP over SSL/TLS) to securely communicate with your AD domain controller.
Creating a new domain & hosted domain controller
To create a hosted domain controller within your Paperspace Private Network, a Paperspace instance can be promoted to a domain controller. Once the domain configuration is complete, the following form must be submitted to complete the setup. This last step will enable users to authenticate with AD when logging in via the web interface or native application.
View our setup guide here.
Limitations
- Paperspace uses the virtual machine as part of the authentication process for signing in an AD user. For this reason:
- AD users may only be assigned/will only be able to access one machine
- AD-joined machines stay on indefinitely, so they should not be hourly machines
- To create a template for AD accounts, the template must be based on a machine that was not previously joined to the domain. We recommend using the administrator account that you use for managing your Paperspace account to create these machines and templates.