2024-03-11 10:42:26 +01:00 
										
									 
								 
							 
							
								
							 
							
								 
							
							
								---
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								title: Auth0 SSO for Docker
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								slug: /deployment/security/auth0/docker
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								---
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								# Auth0 SSO for Docker
  
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								To enable security for the Docker deployment, follow the next steps:
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								## 1. Create an .env file
  
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								Create an `openmetadata_auth0.env`  file and add the following contents as an example. Use the information
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								generated when setting up the account.
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								```shell
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								# OpenMetadata Server Authentication Configuration
  
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								AUTHORIZER_CLASS_NAME=org.openmetadata.service.security.DefaultAuthorizer
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								AUTHORIZER_REQUEST_FILTER=org.openmetadata.service.security.JwtFilter
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								AUTHORIZER_ADMIN_PRINCIPALS=[admin]  # Your `name`  from name@domain .com
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								AUTHORIZER_PRINCIPAL_DOMAIN=open-metadata.org # Update with your domain
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								AUTHENTICATION_PROVIDER=auth0
							 
						 
					
						
							
								
									
										
										
										
											2024-05-31 22:11:14 +05:30 
										
									 
								 
							 
							
								
									
										 
								
							 
							
								 
							
							
								AUTHENTICATION_PUBLIC_KEYS=[{Domain}/.well-known/jwks.json,{your domain}/api/v1/system/config/jwks] # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
							 
						 
					
						
							
								
									
										
										
										
											2024-03-11 10:42:26 +01:00 
										
									 
								 
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								AUTHENTICATION_AUTHORITY={Domain} # Update with your Domain
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								AUTHENTICATION_CLIENT_ID={Client ID} # Update with your Client ID
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								AUTHENTICATION_CALLBACK_URL=http://localhost:8585/callback
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								```
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								## 2. Start Docker
  
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								```commandline
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								docker compose --env-file ~/openmetadata_auth0.env up -d
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								```
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								{% partial file="/v1.4/deployment/configure-ingestion.md" /%}