You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "Christian Englert (Jira)" <ji...@apache.org> on 2020/05/22 19:23:00 UTC
[jira] [Comment Edited] (NIFIREG-147) Add Keycloak authentication
method
[ https://issues.apache.org/jira/browse/NIFIREG-147?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17114352#comment-17114352 ]
Christian Englert edited comment on NIFIREG-147 at 5/22/20, 7:22 PM:
---------------------------------------------------------------------
Currently working on a [KeyCloak|https://www.keycloak.org/] UserGroupProvider
[https://github.com/ChrisEnglert/nifi-addons#keycloak-nifi-registry-nifi-registry-keycloak]
This uses a KeyCloak Admin API Client to read the users and groups of a KeyCloak realm and provide them for NiFi-Registry (readonly)
I'm having some classloader issues that should be resolved by https://issues.apache.org/jira/browse/NIFIREG-394
In conjunction with OIDC Password login I can use a KeyCloak realm to manage NiFi-Registry users:
[https://github.com/ChrisEnglert/nifi-addons#nifi-registry-oidc-nifi-registry-oidc]
was (Author: chriseng):
Currently working on a [KeyCloak|https://www.keycloak.org/] UserGroupProvider
[https://github.com/ChrisEnglert/nifi-addons#keycloak-nifi-registry-nifi-registry-keycloak]
This uses a KeyCloak Admin API Client to read the users and groups of a KeyCloak realm ad provide them for NiFi-Registry (readonly)
I'm having some classloader issues that should be resolved by https://issues.apache.org/jira/browse/NIFIREG-394
In conjunction with OIDC Password login I can use a KeyCloak realm to manage NiFi-Registry users:
[https://github.com/ChrisEnglert/nifi-addons#nifi-registry-oidc-nifi-registry-oidc]
> Add Keycloak authentication method
> ----------------------------------
>
> Key: NIFIREG-147
> URL: https://issues.apache.org/jira/browse/NIFIREG-147
> Project: NiFi Registry
> Issue Type: Improvement
> Reporter: Gregory Reshetniak
> Priority: Major
>
> Keycloak does implement a lot of related functionality, including groups, users and such. It would be great to have first-class integration available.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)