Hi Team, We have enabled Google Auth in Datahub , the version used is v.0.9.2. Currently we have a scenario where we would like to authorise the user based on the Google Groups, the user belongs to. ,ie, along with authenticating user with Google credentials, we should also have a check on the groups and authorise only those users who belongs to certain group which we claim. Is there any option to achieve this? We tired the below and couldn't notice any changes. https://datahubproject.io/docs/authentication/guides/sso/configure-oidc-react/

Currently datahub just accepts anyone whom oidc has authenticated. There is no option to only authorize a certain group of people. One way to workaround would be to only grant view/edit rights to certain groups and give no privileges to others. My team wrote our own custom code in the frontend to reject jwts without the relevant permission from keycloak.

@better-orange-49102 Thank you for the information.

Thanks @better-orange-49102 Do you know whether there is a feature request for this?

Currently datahub just accepts anyone whom oidc has authenticated. There is no option to only authorize a certain group of people.

We will probably be implementing that workaround as an interrim, but we should be able to reject logins.

I'm not sure

We are accepting contributions in this space! So long as we can find a general purpose way to reject.