Access Federation gives you control over access to all, or any subset of your global JFrog Artifactory, JFrog Xray, and JFrog Distribution instances from one location by synchronizing all security entities (users, groups, permissions and access tokens) between the federated instances. Once access federation has been set up, you can manage all security entities in the federated instances from one place. This opens up previously unavailable capabilities such as:
providing build servers connected to any federated instance with access to any of the other Artifactory instances in the federated group
providing globally distributed teams, CI servers or bots with access to any Artifactory instance within a federated group
No proxy support before Artifactory 6.1
For Artifactory versions below 6.1, an Access service that resides behind a proxy cannot be included in a circle of trust and therefore, cannot be included in access federation.
Access federation is available from Artifactory 6.0 and requires an Enterprise+ license.
Since Access Federation data is relayed from a source to a target Access service in plain text, we strongly recommend using HTTPS for communication between two Access services. This can be achieved by configuring Artifactory and Access to work with a reverse proxy.