2024-03-11 10:42:26 +01:00 
										
									 
								 
							 
							
								
							 
							
								 
							
							
								---
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								title: Auth0 SSO for Kubernetes
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								slug: /deployment/security/auth0/kubernetes
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								---
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								# Auth0 SSO for Kubernetes
  
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								Check the Helm information [here ](https://artifacthub.io/packages/search?repo=open-metadata ).
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								Once the `Client Id`  is generated, see the snippet below for an example of where to
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								place the client id value and update the authorizer configurations in the `values.yaml` .
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								```yaml
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								openmetadata:
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								  config:
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								    authorizer:
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								      className: "org.openmetadata.service.security.DefaultAuthorizer"
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								      containerRequestFilter: "org.openmetadata.service.security.JwtFilter"
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								      initialAdmins: 
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								      -  "suresh"
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								      principalDomain: "open-metadata.org"
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								    authentication:
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								      provider: "auth0"
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								      publicKeys: 
							 
						 
					
						
							
								
									
										
										
										
											2024-05-31 22:11:14 +05:30 
										
									 
								 
							 
							
								
									
										 
								
							 
							
								 
							
							
								      -  "{your domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
							 
						 
					
						
							
								
									
										
										
										
											2024-03-11 10:42:26 +01:00 
										
									 
								 
							 
							
								
							 
							
								 
							
							
								      -  "{Auth0 Domain Name}/.well-known/jwks.json"
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								      authority: "https://parth-panchal.us.auth0.com/"
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								      clientId: "{Client ID}"
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								      callbackUrl: "http://localhost:8585/callback"
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								```
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								
							 
						 
					
						
							
								
							 
							
								
							 
							
								 
							
							
								{% partial file="/v1.4/deployment/configure-ingestion.md" /%}