mirror of
https://github.com/open-metadata/OpenMetadata.git
synced 2025-07-23 09:22:18 +00:00
1.3 KiB
1.3 KiB
title | slug |
---|---|
Azure SSO for Bare Metal | /deployment/security/azure/bare-metal |
Azure SSO for Bare Metal
Get the Client Id
and Tenant ID
from Azure Application configured in Step 3.
Get the Azure Service Application Client Id
, Client Secret
, Authority
, Scopes
from the information collected in Step 9.
Update conf/openmetadata.yaml
authenticationConfiguration:
provider: "azure"
publicKeyUrls:
- "https://login.microsoftonline.com/common/discovery/keys"
authority: "https://login.microsoftonline.com/{Tenant ID}"
clientId: "{Client ID}" # Azure Application
callbackUrl: "http://localhost:8585/callback"
Then,
- Update
authorizerConfiguration
to add login names of the admin users inadminPrincipals
section as shown below. - Update the
principalDomain
to your company domain name.
authorizerConfiguration:
className: "org.openmetadata.service.security.DefaultAuthorizer"
# JWT Filter
containerRequestFilter: "org.openmetadata.service.security.JwtFilter"
adminPrincipals:
- "user1"
- "user2"
principalDomain: "open-metadata.org"
{% partial file="/v1.1/deployment/configure-ingestion.md" /%}