IONOS Cloud
Thinfinity® Cloud Manager connects to IONOS Cloud using either username/password credentials or a token-based authentication method. This article documents the Cloud Manager credential form for IONOS, the prerequisites on the IONOS side, and common configuration errors.
All API calls from Cloud Manager originate from the Thinfinity® Workspace server. Ensure outbound HTTPS (port 443) is open from that host to the IONOS Cloud API endpoint (api.ionos.com). See Prerequisites for the full network requirements.
Prerequisites
Before adding IONOS credentials in Cloud Manager, the following must be in place on the IONOS side:
- An active IONOS Cloud account with access to the Data Center Designer (DCD) or the IONOS Cloud API.
- A user account (Cybele Software recommends a dedicated sub-user, not the primary account owner) with the Manage Servers permission on the target data center resources.
- For Username/Password authentication: the Contract Number for your IONOS Cloud account. Found in the IONOS Cloud portal under Account > Contract Information.
- For Token authentication: an API Token generated in the IONOS Cloud portal. The token value is shown only once at creation and must be at least 200 characters long.
For how to manage sub-users, permissions, and API tokens, refer to the IONOS Cloud documentation.
Authentication Methods
IONOS Cloud supports two authentication methods in Cloud Manager.
| Method | When to Use |
|---|---|
| Username / Password | Suitable for single-account setups. Simple to configure. |
| Token | Recommended for production. Tokens can be scoped, rotated, and revoked independently of the account password. |
Option A — Username / Password Authentication
Add the Credentials in Cloud Manager
- In Cloud Manager, go to Credentials and click + New.
- Select IONOS as the provider.
- Ensure Use Token Authentication is set to false (disabled).
- Fill in the fields below and click Save.
For the full Add / Edit / Delete procedure, see Managing Credentials.
Credential Fields
| Field | Description |
|---|---|
| Use Token Authentication | Set to false to use username/password. |
| Username / Email | The email address associated with the IONOS Cloud account. |
| Password | The password for the IONOS Cloud account. |
| Contract Number | The IONOS Cloud contract identifier for the account. Found in the IONOS Cloud portal under Account > Contract Information. |
Option B — Token Authentication
Add the Credentials in Cloud Manager
- In Cloud Manager, go to Credentials and click + New.
- Select IONOS as the provider.
- Set Use Token Authentication to true. The Token field becomes visible; the Username/Password fields are hidden.
- Fill in the fields below and click Save.
For the full Add / Edit / Delete procedure, see Managing Credentials.
Credential Fields
| Field | Description |
|---|---|
| Use Token Authentication | Set to true to enable token-based authentication. |
| Token | The API token generated in the IONOS Cloud portal. Must be at least 200 characters long. |
Verification
After saving, Cloud Manager validates the credentials by listing data centers and server resources in the IONOS account. If validation succeeds, the credential status shows as Ok. If it fails, review the error and refer to Common Errors below.
Common Errors
| Error | Likely Cause | Resolution |
|---|---|---|
401 Unauthorized |
Incorrect username, password, or token. | Verify the credentials. If using a token, check whether it has expired or been revoked in the IONOS Cloud portal. |
403 Forbidden |
The account lacks permissions on the target data center or resources. | Verify that the user or token has the Manage Servers permission on the target resources. |
Contract not found |
The Contract Number is incorrect. | Verify the Contract Number in the IONOS portal under Account > Contract Information. |
| Connection timeout | The Workspace server cannot reach api.ionos.com:443. |
Check firewall and proxy settings on the Workspace server. See Prerequisites. |
Security Recommendations
- Prefer token authentication in production environments. Tokens can be revoked without changing the account password.
- Set token expiration. Rotate tokens before they expire to avoid unexpected connectivity loss.
- Use sub-user accounts with limited permissions rather than the primary account owner credentials.
- Audit API activity in the IONOS Cloud portal under Account > Activity Log.
See Also