2021-08-12 12:37:05 -07:00 
										
									 
								 
							 
							
								
							 
							
								 
							
							
								# Configure OpenMetadata Server
  
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								## Update conf/openmetadata-security.yaml
  
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
									
										
										
										
											2021-12-09 13:36:05 +05:30 
										
									 
								 
							 
							
								
									
										 
								
							 
							
								 
							
							
								Once the `client id`  and `client secret`  are generated, add `client id`  as the value of the `clientId`  field in the openmetadata-security.yaml file. See the snippet below for an example of where to place the `client id`  value.
							 
						 
					
						
							
								
									
										
										
										
											2021-08-12 12:37:05 -07:00 
										
									 
								 
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
									
										
										
										
											2021-11-13 23:03:20 +05:30 
										
									 
								 
							 
							
								
									
										 
								
							 
							
								 
							
							
								```
							 
						 
					
						
							
								
									
										
										
										
											2021-08-12 12:37:05 -07:00 
										
									 
								 
							 
							
								
							 
							
								 
							
							
								authenticationConfiguration:
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								  provider: "google"
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								  publicKey: "https://www.googleapis.com/oauth2/v3/certs"
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								  authority: "https://accounts.google.com"
							 
						 
					
						
							
								
									
										
										
										
											2021-12-06 15:29:44 +00:00 
										
									 
								 
							 
							
								
									
										 
								
							 
							
								 
							
							
								  clientId: "{client id}"
							 
						 
					
						
							
								
									
										
										
										
											2021-08-12 12:37:05 -07:00 
										
									 
								 
							 
							
								
							 
							
								 
							
							
								  callbackUrl: "http://localhost:8585/callback"
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								```
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
									
										
										
										
											2021-12-06 15:29:44 +00:00 
										
									 
								 
							 
							
								
									
										 
								
							 
							
								 
							
							
								Then, update authorizerConfiguration to add adminPrincipals.
							 
						 
					
						
							
								
									
										
										
										
											2021-08-12 12:37:05 -07:00 
										
									 
								 
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
									
										
										
										
											2021-11-13 23:03:20 +05:30 
										
									 
								 
							 
							
								
									
										 
								
							 
							
								 
							
							
								```
							 
						 
					
						
							
								
									
										
										
										
											2021-08-12 12:37:05 -07:00 
										
									 
								 
							 
							
								
							 
							
								 
							
							
								authorizerConfiguration:
							 
						 
					
						
							
								
									
										
										
										
											2021-12-29 11:37:47 -08:00 
										
									 
								 
							 
							
								
									
										 
								
							 
							
								 
							
							
								  className: "org.openmetadata.catalog.security.DefaultAuthorizer"
							 
						 
					
						
							
								
									
										
										
										
											2021-08-12 12:37:05 -07:00 
										
									 
								 
							 
							
								
							 
							
								 
							
							
								  # JWT Filter
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								  containerRequestFilter: "org.openmetadata.catalog.security.JwtFilter"
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								  adminPrincipals:
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								    -  "suresh"
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								  botPrincipals:
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								    -  "ingestion-bot"
							 
						 
					
						
							
								
									
										
										
										
											2021-12-06 15:29:44 +00:00 
										
									 
								 
							 
							
								
									
										 
								
							 
							
								 
							
							
								  principalDomain: "open-metadata.org"
							 
						 
					
						
							
								
									
										
										
										
											2021-08-12 12:37:05 -07:00 
										
									 
								 
							 
							
								
							 
							
								 
							
							
								```