You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@polaris.apache.org by "flyrain (via GitHub)" <gi...@apache.org> on 2025/04/06 19:33:58 UTC
[I] Document Polaris Integration with Third-Party Identity Providers (IDPs) [polaris]
flyrain opened a new issue, #1327:
URL: https://github.com/apache/polaris/issues/1327
### Is your feature request related to a problem? Please describe.
**We need to document how Polaris integrates with third-party Identity Providers (IDPs)** to support authentication and authorization workflows.
### What to Cover:
#### Integration Overview
- High-level flow of how Polaris delegates authentication to external IDPs
- Supported protocols (e.g., OIDC, SAML)
#### Setup Instructions
- Step-by-step guide for integrating with common IDPs (e.g., **Okta**, **Auth0**, **Azure AD**)
- How to **register Polaris as a client application** with the IDP
- Required configuration fields (e.g., client ID, secret, redirect URIs)
- Polaris-side configuration (env variables, config files, etc.)
#### Potential Code Changes
- Highlight any parts of Polaris that might require customization or extension for integration
- Where hooks or plugins might be inserted for custom logic
#### Identifier Sync
- Outline options for syncing user identifiers or roles
- Manual user provisioning
- Automatic sync (e.g., via SCIM or IDP claims)
- Best practices for mapping IDP groups/roles to Polaris permissions
### Describe the solution you'd like
_No response_
### Describe alternatives you've considered
_No response_
### Additional context
_No response_
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Document Polaris Integration with Third-Party Identity Providers (IDPs) [polaris]
Posted by "flyrain (via GitHub)" <gi...@apache.org>.
flyrain commented on issue #1327:
URL: https://github.com/apache/polaris/issues/1327#issuecomment-3128487855
Closed this as #2013 fixed it.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Document Polaris Integration with Third-Party Identity Providers (IDPs) [polaris]
Posted by "flyrain (via GitHub)" <gi...@apache.org>.
flyrain closed issue #1327: Document Polaris Integration with Third-Party Identity Providers (IDPs)
URL: https://github.com/apache/polaris/issues/1327
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Document Polaris Integration with Third-Party Identity Providers (IDPs) [polaris]
Posted by "adutra (via GitHub)" <gi...@apache.org>.
adutra commented on issue #1327:
URL: https://github.com/apache/polaris/issues/1327#issuecomment-3083040643
This has been partially addressed by #2013, although that PR does not cover how to setup the IDP for Polaris (users, groups, roles, etc.) or how to integrate with common IDPs (Okta, Azure AD, etc.).
@flyrain is it OK to close this, or do you think we should improve the current docs with the missing items?
cc @markhoerth
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Document Polaris Integration with Third-Party Identity Providers (IDPs) [polaris]
Posted by "flyrain (via GitHub)" <gi...@apache.org>.
flyrain commented on issue #1327:
URL: https://github.com/apache/polaris/issues/1327#issuecomment-2784674514
It's not only a doc change for sure as complete solution. Given this is highly demanded feature, I think it's still valuable to document workarounds before #441 was implemented. So that users can try to integrate by themselves.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Document Polaris Integration with Third-Party Identity Providers (IDPs) [polaris]
Posted by "adutra (via GitHub)" <gi...@apache.org>.
adutra commented on issue #1327:
URL: https://github.com/apache/polaris/issues/1327#issuecomment-3148369472
FYI I'm adding a getting-started example: #2244
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Document Polaris Integration with Third-Party Identity Providers (IDPs) [polaris]
Posted by "adutra (via GitHub)" <gi...@apache.org>.
adutra commented on issue #1327:
URL: https://github.com/apache/polaris/issues/1327#issuecomment-2782261526
This feature is currently not available for Polaris at all, so it's not just a matter of documentation, it's a matter of _implementing_ the feature.
The only way today would be to implement a custom `Authenticator` and `TokenBroker` – but with just Polaris OSS code, it's impossible. And implementing a proper authentication layer with OAuth2 token introspection, JWT claim mapping and all that jazz, is not really a trivial task.
This issue is possibly a duplicate of:
https://github.com/apache/polaris/issues/336
Also related:
https://github.com/apache/polaris/issues/12
https://github.com/apache/polaris/issues/441
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org