:wave: We enabled google auth on our frontend ins...
# uih
high-hospital-85984
05/03/2021, 10:34 AM👋 We enabled google auth on our frontend instance. We can access our user pages (
/user/urn:li:corpuser:fredrikb
big-carpet-38439
05/03/2021, 2:08 PMHi Fredrik -- It's important to note that when you enable auth we do not ingest from your auth source. Instead, we simply enable authentication with your Identity Provider. It's expected that your users already have Metadata profiles within DataHub (via the ingest framework ideally)
big-carpet-38439
05/03/2021, 2:09 PMSo configuring users on DH is currently a 2-step process:
1. Ingest CorpUser "profiles" from your identity provider of choice
2. Configure SSO Authentication with your identity provider
big-carpet-38439
05/03/2021, 2:10 PMThere may be some improvements we can make to this... Like auto-creating the CorpUser entity once someone has logged in...Maybe we can chat about what you'd have in mind
h
high-hospital-85984
05/03/2021, 2:11 PMGot it! thanks for the explanation!
b
big-carpet-38439
05/03/2021, 2:12 PMGlad you were able to get the authentication itself configured )
big-carpet-38439
05/03/2021, 2:12 PM🙂
h
high-hospital-85984
05/03/2021, 5:08 PMGood instructions made it trivial to get working 👍
🙌 1
b
better-orange-49102
05/05/2021, 9:22 AMMay I take the chance to clarify:
1. once google auth or any form of auth is enabled, the user needs to login in order to access datahub right? Else it will not let him/her see anything?
2. if there is no Corpuser entity for that logged in user, the user is unable to make edits to the metadata?
thanks!
b
big-carpet-38439
05/05/2021, 3:57 PMHi @better-orange-49102.
1. Yes
2. Actually today we will treat the logged in user as a user who just doesn't have profile information. Today, they are still free to edit metadata (though restrictions on metadata will be coming with the RBAC initiative on the roadmap)
b
better-orange-49102
05/07/2021, 2:23 AMthanks for clarifying John!❤️
b
big-carpet-38439
05/07/2021, 3:46 AMAnytime 🙂
2 Views