Re: [I] The request to sign in was denied. [superset]

["dhruv-bardolia (via GitHub)" <gi...@apache.org>]

dhruv-bardolia commented on issue #26095:
URL: https://github.com/apache/superset/issues/26095#issuecomment-2616041962

   Hi I am also facing the same issue. 
   I am trying authentik in place of Azure for SSO. Following is my configuration:
   `
         FEATURE_FLAGS = {"DYNAMIC_PLUGINS": True}
         import os
         os.system('pip install packaging==21.3 psycopg2-binary grpcio authlib pillow')
   
         from flask_appbuilder.security.manager import AUTH_OAUTH
         AUTH_TYPE = AUTH_OAUTH
         ENABLE_PROXY_FIX = True
         SESSION_COOKIE_SAMESITE = "None"
         SESSION_COOKIE_SECURE = True
         OAUTH_PROVIDERS = [
           {
             "name": "authentik",
             "icon": "fa-authentik",
             "token_key": "access_token",
             "remote_app": {
               "client_id": "----",
               "client_secret": "------",
               "api_base_url": "https://----/application/o/",
               "client_kwargs": {"scope": "User.read openid email profile"},
               "request_token_url": None,
               "access_token_url": "https://-------/application/o/token/",
               "authorize_url": "https://----/application/o/authorize/",
               "authorize_params": {
                 "redirect_uri" : "https://----/oauth-authorized/authentik"
               }
             }
           }
         ]
   
         AUTH_USER_REGISTRATION = True
         AUTH_USER_REGISTRATION_ROLE = "Admin"
         AUTH_ROLES_SYNC_AT_LOGIN = True
   
         # Map OAuth groups to Superset roles if needed
         AUTH_ROLES_MAPPING = {
             "superset": ["Admin"],
             # Add more mappings as needed
         }
         
   `
   --- denots my DNS for example xyz.xyz.com
   ![Image](https://github.com/user-attachments/assets/98bd967a-f182-49a1-a8ca-da2ecebd94d4)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org