// Module included in the following assemblies:
//
// * rosa_govcloud/rosa-create-govcloud-cluster.adoc

:_mod-docs-content-type: PROCEDURE
[id="rosa-govcloud-fedramp-signup_{context}"]
= Signing up for a Red Hat FedRAMP account

[role="_abstract"]
To access {product-title} in AWS GovCloud, you must sign up for a Red{nbsp}Hat FedRAMP account.

.Procedure
. Navigate to link:https://console.redhat.com/openshift/create/rosa/govcloud[the ROSA GovCloud access request form].
. Complete the access request form.
. Click *Submit* to sign up. You receive a _Submission confirmation_.
+
Red{nbsp}Hat's confirmed stateside support team contacts you through email for the following information:
+
* *Admin details* to include your _organization name_, _administrator first and surname_ and _administrator email_.
* *User authentication* option to the FedRAMP {hybrid-console-second} from one of the following two options:
** _Local group in a Red{nbsp}Hat managed Keycloak instance_, where users will be required to setup multifactor authentication (MFA) with an approved device.
+
[NOTE]
====
Only device link:https://www.yubico.com/product/yubikey-5c-nfc-fips[YubiKEY 5C NFC FIPS] currently accepted.
====
+
** _Customer managed Identity Provider (IdP), integrated via OpenID Connect (OIDC)_, where you will need to provide the following:
*** *Discovery Endpoint:* The IdP's OIDC discovery URL (typically ending in _/.well-known/openid-configuration_). This allows Keycloak to automatically fetch most of the IdP's settings.
*** *Client ID and secret:* Credentials that allow Keycloak to authenticate with the customer's IdP.
*** *Email domain(s):* A list of approved email domains. Only users with an email address from one of these domains will be allowed to log in.
*** *Essential claim:* A specific key-value pair (e.g., _"rh-approved": "true"_) that must be present in a user's token from the IdP to grant them access. In this configuration, the customer takes on the responsibility for implementing FIPS 140-2 validated MFA.


// Following process with a sign up button will not be available until https://issues.redhat.com/browse/CRCPLAN-397 is complete.
//. Navigate to https://console.openshiftusgov.com/openshift/token.
//. Click *Sign up* to sign up for a {product-title} FedRAMP account.
//+
//* The *Sign up* link is located below the *Log in* button.
//+
//. Enter the required information and click the *Sign up* button.
//. Once you receive an email with a code for you to confirm, enter the token and click *Confirm account*.
//+
//You will be directed to a screen with your login token.
