mirror of
https://github.com/datahub-project/datahub.git
synced 2025-08-31 04:25:29 +00:00
1 line
12 KiB
JavaScript
1 line
12 KiB
JavaScript
"use strict";(self.webpackChunkdocs_website=self.webpackChunkdocs_website||[]).push([[86296],{7653:(e,t,n)=>{n.d(t,{A:()=>r});const r={icon:{tag:"svg",attrs:{"fill-rule":"evenodd",viewBox:"64 64 896 896",focusable:"false"},children:[{tag:"path",attrs:{d:"M512 64c247.4 0 448 200.6 448 448S759.4 960 512 960 64 759.4 64 512 264.6 64 512 64zm127.98 274.82h-.04l-.08.06L512 466.75 384.14 338.88c-.04-.05-.06-.06-.08-.06a.12.12 0 00-.07 0c-.03 0-.05.01-.09.05l-45.02 45.02a.2.2 0 00-.05.09.12.12 0 000 .07v.02a.27.27 0 00.06.06L466.75 512 338.88 639.86c-.05.04-.06.06-.06.08a.12.12 0 000 .07c0 .03.01.05.05.09l45.02 45.02a.2.2 0 00.09.05.12.12 0 00.07 0c.02 0 .04-.01.08-.05L512 557.25l127.86 127.87c.04.04.06.05.08.05a.12.12 0 00.07 0c.03 0 .05-.01.09-.05l45.02-45.02a.2.2 0 00.05-.09.12.12 0 000-.07v-.02a.27.27 0 00-.05-.06L557.25 512l127.87-127.86c.04-.04.05-.06.05-.08a.12.12 0 000-.07c0-.03-.01-.05-.05-.09l-45.02-45.02a.2.2 0 00-.09-.05.12.12 0 00-.07 0z"}}]},name:"close-circle",theme:"filled"}},4732:(e,t,n)=>{n.d(t,{A:()=>s});var r=n(89379),a=n(96540),o=n(7653),i=n(89990),l=function(e,t){return a.createElement(i.A,(0,r.A)((0,r.A)({},e),{},{ref:t,icon:o.A}))};const s=a.forwardRef(l)},15680:(e,t,n)=>{n.d(t,{xA:()=>u,yg:()=>m});var r=n(96540);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),c=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},u=function(e){var t=c(e.components);return r.createElement(s.Provider,{value:t},e.children)},p="mdxType",g={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),p=c(n),d=a,m=p["".concat(s,".").concat(d)]||p[d]||g[d]||o;return n?r.createElement(m,i(i({ref:t},u),{},{components:n})):r.createElement(m,i({ref:t},u))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=n.length,i=new Array(o);i[0]=d;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l[p]="string"==typeof e?e:a,i[1]=l;for(var c=2;c<o;c++)i[c]=n[c];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},43655:(e,t,n)=>{n.d(t,{A:()=>h});var r=n(96540),a=n(20053);const o="availabilityCard_P5od",i="managedIcon_AxXO",l="platform_wqXv",s="platformAvailable_Y8lN";var c=n(4732),u=n(89379);const p={icon:{tag:"svg",attrs:{viewBox:"64 64 896 896",focusable:"false"},children:[{tag:"path",attrs:{d:"M512 64C264.6 64 64 264.6 64 512s200.6 448 448 448 448-200.6 448-448S759.4 64 512 64zm193.5 301.7l-210.6 292a31.8 31.8 0 01-51.7 0L318.5 484.9c-3.8-5.3 0-12.7 6.5-12.7h46.9c10.2 0 19.9 4.9 25.9 13.3l71.2 98.8 157.2-218c6-8.3 15.6-13.3 25.9-13.3H699c6.5 0 10.3 7.4 6.5 12.7z"}}]},name:"check-circle",theme:"filled"};var g=n(89990),d=function(e,t){return r.createElement(g.A,(0,u.A)((0,u.A)({},e),{},{ref:t,icon:p}))};const m=r.forwardRef(d);const y={icon:{tag:"svg",attrs:{viewBox:"64 64 896 896",focusable:"false"},children:[{tag:"path",attrs:{d:"M811.4 418.7C765.6 297.9 648.9 212 512.2 212S258.8 297.8 213 418.6C127.3 441.1 64 519.1 64 612c0 110.5 89.5 200 199.9 200h496.2C870.5 812 960 722.5 960 612c0-92.7-63.1-170.7-148.6-193.3zm36.3 281a123.07 123.07 0 01-87.6 36.3H263.9c-33.1 0-64.2-12.9-87.6-36.3A123.3 123.3 0 01140 612c0-28 9.1-54.3 26.2-76.3a125.7 125.7 0 0166.1-43.7l37.9-9.9 13.9-36.6c8.6-22.8 20.6-44.1 35.7-63.4a245.6 245.6 0 0152.4-49.9c41.1-28.9 89.5-44.2 140-44.2s98.9 15.3 140 44.2c19.9 14 37.5 30.8 52.4 49.9 15.1 19.3 27.1 40.7 35.7 63.4l13.8 36.5 37.8 10c54.3 14.5 92.1 63.8 92.1 120 0 33.1-12.9 64.3-36.3 87.7z"}}]},name:"cloud",theme:"outlined"};var b=function(e,t){return r.createElement(g.A,(0,u.A)((0,u.A)({},e),{},{ref:t,icon:y}))};const f=r.forwardRef(b),h=({saasOnly:e,ossOnly:t})=>r.createElement("div",{className:(0,a.A)(o,"card")},r.createElement("strong",null,"Feature Availability"),r.createElement("div",null,r.createElement("span",{className:(0,a.A)(l,!e&&s)},"Self-Hosted DataHub ",e?r.createElement(c.A,null):r.createElement(m,null))),r.createElement("div",null,r.createElement(f,{className:i}),r.createElement("span",{className:(0,a.A)(l,!t&&s)},"DataHub Cloud ",t?r.createElement(c.A,null):r.createElement(m,null))))},18266:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>c,default:()=>y,frontMatter:()=>s,metadata:()=>u,toc:()=>g});n(96540);var r=n(15680),a=n(43655);function o(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){return t=null!=t?t:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):function(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))})),e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}const s={description:"This page will help you set up OIDC SSO with your identity provider to log into DataHub",title:"Enable OIDC SSO",slug:"/managed-datahub/integrations/oidc-sso-integration",custom_edit_url:"https://github.com/datahub-project/datahub/blob/master/docs/managed-datahub/integrations/oidc-sso-integration.md"},c="Enable OIDC SSO",u={unversionedId:"docs/managed-datahub/integrations/oidc-sso-integration",id:"docs/managed-datahub/integrations/oidc-sso-integration",title:"Enable OIDC SSO",description:"This page will help you set up OIDC SSO with your identity provider to log into DataHub",source:"@site/genDocs/docs/managed-datahub/integrations/oidc-sso-integration.md",sourceDirName:"docs/managed-datahub/integrations",slug:"/managed-datahub/integrations/oidc-sso-integration",permalink:"/docs/managed-datahub/integrations/oidc-sso-integration",draft:!1,editUrl:"https://github.com/datahub-project/datahub/blob/master/docs/managed-datahub/integrations/oidc-sso-integration.md",tags:[],version:"current",frontMatter:{description:"This page will help you set up OIDC SSO with your identity provider to log into DataHub",title:"Enable OIDC SSO",slug:"/managed-datahub/integrations/oidc-sso-integration",custom_edit_url:"https://github.com/datahub-project/datahub/blob/master/docs/managed-datahub/integrations/oidc-sso-integration.md"},sidebar:"overviewSidebar",previous:{title:"Prerequisites for OIDC Authentication",permalink:"/docs/authentication/guides/sso/initialize-oidc"},next:{title:"About Remote Executor",permalink:"/docs/managed-datahub/remote-executor/about"}},p={},g=[{value:"Step 1. Complete OIDC Prerequisites",id:"step-1-complete-oidc-prerequisites",level:3},{value:"Step 2. Enable OIDC SSO",id:"step-2-enable-oidc-sso",level:3}],d={toc:g},m="wrapper";function y(e){var{components:t}=e,n=l(e,["components"]);return(0,r.yg)(m,i(function(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{},r=Object.keys(n);"function"==typeof Object.getOwnPropertySymbols&&(r=r.concat(Object.getOwnPropertySymbols(n).filter((function(e){return Object.getOwnPropertyDescriptor(n,e).enumerable})))),r.forEach((function(t){o(e,t,n[t])}))}return e}({},d,n),{components:t,mdxType:"MDXLayout"}),(0,r.yg)("h1",{id:"enable-oidc-sso"},"Enable OIDC SSO"),(0,r.yg)(a.A,{saasOnly:!0,mdxType:"FeatureAvailability"}),(0,r.yg)("p",null,"This guide will walk you through configuring OIDC Single Sign-On in DataHub Cloud."),(0,r.yg)("h3",{id:"step-1-complete-oidc-prerequisites"},"Step 1. Complete OIDC Prerequisites"),(0,r.yg)("p",null,"You will need the following in order to enable OIDC SSO in DataHub Cloud:"),(0,r.yg)("ul",null,(0,r.yg)("li",{parentName:"ul"},"Gather the ",(0,r.yg)("strong",{parentName:"li"},"Client ID"),", ",(0,r.yg)("strong",{parentName:"li"},"Client Secret"),", and ",(0,r.yg)("strong",{parentName:"li"},"Discovery URI")," for your OIDC provider, as detailed in ",(0,r.yg)("a",{parentName:"li",href:"/docs/authentication/guides/sso/initialize-oidc"},"this guide"),"."),(0,r.yg)("li",{parentName:"ul"},"Confirm you have the ",(0,r.yg)("inlineCode",{parentName:"li"},"Manage Platform Settings")," privilege in DataHub.")),(0,r.yg)("h3",{id:"step-2-enable-oidc-sso"},"Step 2. Enable OIDC SSO"),(0,r.yg)("ol",null,(0,r.yg)("li",{parentName:"ol"},"In DataHub Cloud, navigate to ",(0,r.yg)("strong",{parentName:"li"},"Settings > Platform > SSO")," and choose ",(0,r.yg)("strong",{parentName:"li"},"OIDC"),".")),(0,r.yg)("p",{align:"center"},(0,r.yg)("img",{width:"80%",src:"https://raw.githubusercontent.com/datahub-project/static-assets/refs/heads/main/imgs/saas/configure-oidc.png"})),(0,r.yg)("ol",{start:2},(0,r.yg)("li",{parentName:"ol"},(0,r.yg)("p",{parentName:"li"},"Enter the ",(0,r.yg)("strong",{parentName:"p"},"Client ID"),", ",(0,r.yg)("strong",{parentName:"p"},"Client Secret"),", and ",(0,r.yg)("strong",{parentName:"p"},"Discovery URI")," from Step 1.")),(0,r.yg)("li",{parentName:"ol"},(0,r.yg)("p",{parentName:"li"},"Confirm your preferred ",(0,r.yg)("strong",{parentName:"p"},"User Provisioning Strategy"),":"),(0,r.yg)("ul",{parentName:"li"},(0,r.yg)("li",{parentName:"ul"},(0,r.yg)("strong",{parentName:"li"},"Just-in-Time (JIT) Provisioning")," is enabled by default, automatically creating a DataHub User on login if one does not exist."),(0,r.yg)("li",{parentName:"ul"},(0,r.yg)("strong",{parentName:"li"},"Pre-Provisioning DataHub Users")," will only allow login for pre-provisioned DataHub Users. ",(0,r.yg)("em",{parentName:"li"},"Requires configuring SSO Ingestion.")))),(0,r.yg)("li",{parentName:"ol"},(0,r.yg)("p",{parentName:"li"},"Optionally enable ",(0,r.yg)("strong",{parentName:"p"},"Extract Groups")," to extract group memberships in the OIDC profile by default. ",(0,r.yg)("em",{parentName:"p"},"Requires JIT Provisioning."))),(0,r.yg)("li",{parentName:"ol"},(0,r.yg)("p",{parentName:"li"},"Click ",(0,r.yg)("strong",{parentName:"p"},"Connect"),".")),(0,r.yg)("li",{parentName:"ol"},(0,r.yg)("p",{parentName:"li"},"Log out and log back in through SSO to confirm connection succeeded."))),(0,r.yg)("p",{align:"center"},(0,r.yg)("img",{width:"80%",src:"https://raw.githubusercontent.com/datahub-project/static-assets/main/imgs/saas/image-(10).png"})),(0,r.yg)("admonition",{type:"note"},(0,r.yg)("p",{parentName:"admonition"},"We do not yet support LDAP or SAML authentication. Please let us know if either of these integrations would be useful for your organization.")))}y.isMDXComponent=!0}}]); |