[GitHub] mistercrunch commented on issue #3312: Proposal: make single sign on and other auth/authn easier by removing Flask AppBuilder

[gi...@git.apache.org]

mistercrunch commented on issue #3312: Proposal: make single sign on and other auth/authn easier by removing Flask AppBuilder
URL: https://github.com/apache/incubator-superset/issues/3312#issuecomment-322973861
 
 
   Authentication is a web framework-related feature and I'd prefer for the work to take place within FAB. I'm a maintainer of FAB (I obtained write access on the repository after many contributions) so I can help on that side.
   
   At Airbnb we login against LDAP using AUTH_REMOTE_USER. We have a nginx reverse proxy that takes care of authenticating against LDAP and add headers that Superset can pick up. We use this service for countless internal apps. It's nice since it works with apps written in all languages.
   
   On the login event we simply create new users on the fly. It's not too hard to setup a script that will create/maintain roles dynamically/periodically in Superset either.
   
   Better LDAP support would be nice though. 
 
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services