Authentication

You can sign up or log in via the the web and the CLI. Infracost Cloud supports logging in via GitHub, Google or an email/password.

Web

1. Go to Infracost Cloud to sign up or log in.
2. Switch to the desired organization. Every Infracost user has a default organization for personal use. You should create a new organization for your company using the organization dropdown at the top of the page.
3. Go to Org Settings page and copy your API key:
4. To use it in CI/CD, set the INFRACOST_API_KEY environment variable.
5. To use it in the CLI, run infracost configure set api_key MY_API_KEY.
6. Run Infracost commands or CI/CD integrations as usual.

If you signed up using an email/password, you can change your password by logging out and clicking on "Don't remember your password?".

Email addresses are unique in Infracost Cloud. Thus when you log in with GitHub, Google or an email/password, if the email associated with the login is the same as a previous login, you will be given the option to link the accounts together, so you can log in using either method.

CLI

1. Upgrade to the latest version.
2. Run infracost auth login. This opens an authentication web page and saves the API key locally. If you run into issues, follow the web log in and set the CLI API key manually.
3. Run Infracost commands as usual. If you need to create a new organization or retrieve your API key, use our web UI.

Enterprise Single Sign On (SSO)

Infracost Cloud supports authenticating with Enterprise SSO providers. To set up SSO with Infracost Cloud follow one of the following guides:

• Azure Active Directory
• Okta
• Google Workspace
• Other SAML providers

Once your SSO connection is configured any user authenticating with the your company domain name in the usual log in page will be redirected to your SSO provider for authenticating.