mirror of
https://github.com/open-metadata/OpenMetadata.git
synced 2025-07-23 17:30:35 +00:00
43 lines
1.4 KiB
Markdown
43 lines
1.4 KiB
Markdown
# Configure OpenMetadata Server
|
|
|
|
## Update conf/openmetadata-security.yaml
|
|
|
|
Once the **Client Id**, and **Issuer URL** are generated, add those details in `openmetadata-security.yaml` file in the respective fields.
|
|
|
|
```yaml
|
|
authenticationConfiguration:
|
|
provider: "okta"
|
|
publicKeyUrls:
|
|
- "{ISSUER_URL}/v1/keys"
|
|
authority: "{ISSUER_URL}"
|
|
clientId: "{CLIENT_ID - SPA APP}"
|
|
callbackUrl: "http://localhost:8585/callback"
|
|
```
|
|
|
|
* **ISSUER\_URL** - This can be found in **Security -> API -> Authorization Servers**.
|
|
|
|
 (1).png>)
|
|
|
|
* **CLIENT\_ID - SPA APP** - This is the Client\_ID for Single Page Applications. On configuring the app, the Client\_ID can be found in the **General** section, under **Client Credentials >> Client ID**
|
|
|
|
.png>)
|
|
|
|
Update `authorizerConfiguration` to add `adminPrincipals`
|
|
|
|
* For `adminPrincipals`, add the **Username**.
|
|
* For `botPrincipals`, add the **Ingestion Client ID** for the Service application. This can be found in **Okta -> Applications -> Applications**.
|
|
|
|
.png>)
|
|
|
|
```yaml
|
|
authorizerConfiguration:
|
|
className: "org.openmetadata.catalog.security.DefaultAuthorizer"
|
|
containerRequestFilter: "org.openmetadata.catalog.security.JwtFilter"
|
|
adminPrincipals:
|
|
- "<username>"
|
|
botPrincipals:
|
|
- "ingestion-bot"
|
|
- "<Ingestion Client ID>"
|
|
principalDomain: "open-metadata.org"
|
|
```
|