Skip to main content
CMDashCyber Maturity Dashboard
DocsAdministrationDeploying CMDash Cloud

Deploying CMDash Cloud

Purpose: get a CMDash Cloud workspace running: create the workspace, set up single sign-on and invite your team.

CMDash Cloud is the hosted service. CMDash operates it, applies every update and keeps the platform patched, so there is nothing to install. Your data is held in one commercial AWS region, us-east-1. To see how it differs from running CMDash on your own servers or in your own AWS account, read Choose where CMDash runs.

Before you start

  • A work e-mail address. The person who creates the workspace becomes its Owner, the single account that can transfer ownership.
  • The plan you want. Free, Starter, Essentials, Command and Enterprise all run on CMDash Cloud. See pricing.
  • For single sign-on, access to your identity provider's admin console. SSO (SAML 2.0 and OIDC) is included from the Starter plan; SCIM and LDAP directory sync are on Enterprise.

1. Create the workspace

  1. Open https://app.cmdash.com and create your account from the sign-up page.
  2. As the Owner you land in the onboarding wizard. It configures the organization, not just your own account, and you can leave and resume it. The steps are in the Quick Start Guide.

2. Set up single sign-on

Go to Settings → SSO.

  1. Copy the Service Provider Metadata to your identity provider.
  2. Choose your provider (Okta, Azure AD / Entra ID, Google Workspace, Ping Identity or a custom SAML 2.0 IdP), then fill in the identity provider fields.
  3. Add group mappings if you want an IdP group to set a CMDash role.
  4. Run Run self-test before you roll it out to everyone.

The Owner can always fall back to e-mail and password, so an identity provider outage cannot lock the whole workspace out. Full detail: SSO, SCIM & LDAP.

3. Invite your team

  1. Open Members.
  2. Select Invite, enter the person's e-mail address and choose Admin or Viewer.
  3. CMDash e-mails an invitation that expires after 7 days. Revoke and re-invite to send a new one.

To add many people at once, use the bulk CSV import (email,role,name). Full detail: Users & Roles.

4. Connect your tools

Add your first integration from Integrations. Connector calls to your tools come from CMDash's hosted infrastructure, which has no fixed IP range to allow-list. If a tool only accepts allow-listed addresses, read IP Ranges & Allow-Listing.

What CMDash handles for you

AreaWho does it
Servers, database, storage and platform patchesCMDash
UpdatesCMDash. Nothing to apply; see Updating CMDash
Backups of the hosted databaseCMDash, with point-in-time restore
Users, roles and sign-inYou
Which tools to connect and what each credential may accessYou

This page is the product manual, published from the repository at docs/user/admin/deploying-cmdash-cloud.md. Customers read the same text inside CMDash under Help. Last updated October 25, 2026.

Deploying CMDash Cloud — CMDash Docs