You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2017/10/16 14:37:00 UTC

[jira] [Updated] (RANGER-1839) Add the ability to specify SSO token audiences

     [ https://issues.apache.org/jira/browse/RANGER-1839?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh updated RANGER-1839:
----------------------------------------
    Attachment: 0001-RANGER-1839-Add-the-ability-to-specify-SSO-token-aud.patch

> Add the ability to specify SSO token audiences
> ----------------------------------------------
>
>                 Key: RANGER-1839
>                 URL: https://issues.apache.org/jira/browse/RANGER-1839
>             Project: Ranger
>          Issue Type: Improvement
>          Components: admin
>            Reporter: Colm O hEigeartaigh
>            Assignee: Colm O hEigeartaigh
>            Priority: Minor
>             Fix For: 1.0.0
>
>         Attachments: 0001-RANGER-1839-Add-the-ability-to-specify-SSO-token-aud.patch
>
>
> The KNOXSSO service can configure an audience parameter to restrict the audience of a given issued token. However, we can't enforce this check in Ranger. This task is to add a new configuration parameter "ranger.sso.audiences", which is a comma separated String of audiences, one of which must be contained (if specified) in the received token.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)