A complete solution for open data platforms, enterprise data catalogs, data lakes and data management. Open source, mature, fully-featured and production ready.

DataHub

We integrated with Okta, but then how can I log out to login to the admin account? Every time I logout, the page redirects to Okta and automatically relogs me back in?

Hello William, what admin account are you referring to?

If you still have JAAS-based authentication enabled (`AUTH_JAAS_ENABLED=true` on datahub frontend) you can access the login page on
```https://&lt;datahub-url&gt;:9002/login```
Assuming you datahub running on port 9002.

I would HIGHLY recommend you change the default account that works there though! Modify `user.props` file that should attached to datahub-frontend accordingly.

You can find more details about JAAS here: <https://datahubproject.io/docs/how/auth/jaas>

<@U01L2QD243Z> - I am facing the same issue. Whenever I logout, it automatically asks for authentication without asking for user id and password. How do we resolve this ?

Hello <@U029VFMT1GV> 
Is enabling JAAS auth as well as OIDC?

<@U01L2QD243Z> Our current OIDC configurations are as below -
```extraEnvs:
  - name: AUTH_OIDC_ENABLED
    value: "true"
  - name: AUTH_OIDC_CLIENT_ID
    value: "clientid"
  - name: AUTH_OIDC_CLIENT_SECRET
    value: "secret!"
  - name: AUTH_OIDC_DISCOVERY_URI
    value: "discovery url"
  - name: AUTH_OIDC_BASE_URL
    value: "hostname"
  - name: AUTH_OIDC_SCOPE
    value: "openid profile email"
  - name: AUTH_OIDC_JIT_PROVISIONING_ENABLED
    value: "false"
  - name: AUTH_OIDC_PRE_PROVISIONING_REQUIRED
    value: "true"
  #- name: AUTH_OIDC_USER_NAME_CLAIM
  #  value: "email"
  #- name: AUTH_OIDC_USER_NAME_CLAIM_REGEX
  # value: "([^@]+)"```

Please also enable JAAS auth and try to login with datahub user/pass combo. If that works then you can specify special admin accounts in the user.props file of the datahub frontend container. See JAAS login documentation for that.

That said, if you are using OIDC and want to access an admin account I would suggest creating one in your identity provider, say okta, then in an anonymous tab login to datahub using that account.

<@U01L2QD243Z> how can I specify special admin accounts as you mentioned in user.props? I see that user.props only have the user:pass key pair. I have added users in user.props but no user can add tags etc and I get this error.
`Failed to create &amp; add tag: Unauthorized to perform this action. Please contact your DataHub administrator.`
How can I add permissions for the users.

Hello Hamid, the new account needs to be have this permission most likely: <https://github.com/datahub-project/datahub/blob/58fbf9fc899a01c260032fb2c95e0a5d7654f768/metadata-utils/src/main/java/com/linkedin/metadata/authorization/PoliciesConfig.java#L78|https://github.com/datahub-project/datahub/blob/58fbf9fc899a01c260032fb2c95e0a5d7654f768/metadata-utils/src/main/java/com/linkedin/metadata/authorization/PoliciesConfig.java#L78>

I have opened a PR to document these permissions on our docs, as they were linked only on the code. Apologies for that!

<@U01L2QD243Z> where can I set this privillage? I don’t have the users visible in UI because they were added in user.props?

The user does not appear when searching for it? Nor in the Users &amp; Groups tab?

No but still I can login with the users added to `user.props` file