Hello! I’ve been evaluating Airbyte’s open source ...
# replication-troubleshooting
s
Hello! I’ve been evaluating Airbyte’s open source offering as an alternative to Fivetran for my organization. We’re really excited about Airbyte and there’s a lot we love about it, but we have two blocking features that I’d love to get your take on. 1. SSO login support, specifically via Okta. I see that it’s on the roadmap for Airbyte Cloud - do you have any information on the timeline of this effort? Are there plans to release this for the open source version as well? 2. What are the plans for user management within Airbyte? In the open source version, it seems as though it only supports a single user. Are there plans to implement multiple users and ability to set read/write permissions? Really appreciate any information you can provide here! We do have Airbyte set up behind our VPN, but our infosec team requires stricter access controls than that can provide. We’re talking through alternative paths such as using Octavia exclusively instead of the UI, but I think user management in the UI will be the key for us making the swap.
4
✍️ 1
j
+1
u
@[DEPRECATED] Marcos Marx turned this thread into Zendesk ticket 2788 to ensure timely resolution!
s
Hey there, thanks so much for letting us know about your requirements and perspective! Right now we're working on the auth roadmap, investigating solutions for SSO, 2FA and RBAC. We will definitely share updates as we get further in the process! Until we know more on how these will be implemented, we can't really say how it will roll out but Cloud is currently our main target. I did find this open Github issue for SSO/RBAC, the latter of which should resolve your concerns around user management, please leave a thumbs up and add a comment if you can: https://github.com/airbytehq/airbyte/issues/3583 In the meantime it may be possible to improve access control depending on how it's hosted, for example: • Google Cloud offers a service called Identity-Aware Proxy that verifies users by OAuth before access is granted (please hit 👍 on this Github issue to prioritize writing a tutorial) • AWS has a similar solution called AWS Systems Manager Session Manager • Setting up OAuth2-Proxy in front of Airbyte as suggested in the Okta blog, or another reverse proxy in front of Airbyte with HTTP basic auth (e.g. nginx, traefik) Let us know if we can help you implement the above solutions. Either way we will be releasing updates about auth in Airbyte as they come! Thanks again for the input, learning more about your needs is incredibly important in helping us prioritize features and designing their implementation.
👀 1