You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2017/10/16 14:37:00 UTC
[jira] [Updated] (RANGER-1839) Add the ability to specify SSO token
audiences
[ https://issues.apache.org/jira/browse/RANGER-1839?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Colm O hEigeartaigh updated RANGER-1839:
----------------------------------------
Attachment: 0001-RANGER-1839-Add-the-ability-to-specify-SSO-token-aud.patch
> Add the ability to specify SSO token audiences
> ----------------------------------------------
>
> Key: RANGER-1839
> URL: https://issues.apache.org/jira/browse/RANGER-1839
> Project: Ranger
> Issue Type: Improvement
> Components: admin
> Reporter: Colm O hEigeartaigh
> Assignee: Colm O hEigeartaigh
> Priority: Minor
> Fix For: 1.0.0
>
> Attachments: 0001-RANGER-1839-Add-the-ability-to-specify-SSO-token-aud.patch
>
>
> The KNOXSSO service can configure an audience parameter to restrict the audience of a given issued token. However, we can't enforce this check in Ranger. This task is to add a new configuration parameter "ranger.sso.audiences", which is a comma separated String of audiences, one of which must be contained (if specified) in the received token.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)