[jira] [Updated] (KNOX-821) Identity Assertion Providers must be able to be chained together

["Larry McCay (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/KNOX-821?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Larry McCay updated KNOX-821:
-----------------------------
    Fix Version/s:     (was: 0.12.0)
                   Future

> Identity Assertion Providers must be able to be chained together
> ----------------------------------------------------------------
>
>                 Key: KNOX-821
>                 URL: https://issues.apache.org/jira/browse/KNOX-821
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>            Reporter: Larry McCay
>             Fix For: Future
>
>
> The provider pipeline currently is limited to a single plugin per role name. Identity assertion providers are immediately in need of support for multiple at the same time. Especially since the addition of the Hadoop group lookup provider, we need to be able to also map principals or extract usernames from principals before group lookup using regex, etc.
> It may make sense to also support multiple authentication/federation providers for MFA type scenarios.
> We should consider whether we want a generic approach to being able to have multiple providers across the board or whether an identity assertion specific solution is prudent.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)