Keycloak SSO for Bare Metal
Update conf/openmetadata.yaml
Once the Client Id
and Client Secret
are generated add the Client Id
in openmetadata.yaml
file in client_id
field.
Update the providerName
config to the name you want to display in the Sign In
button in the UI. For example, with the following configuration with providerName
set to KeyCloak
, the users will see Sign In with KeyCloak SSO
in the Sign In
page of the OpenMetadata UI.
The configuration below already uses the presets shown in the example of keycloak configurations, you can change to yours.
Then,
- Update
authorizerConfiguration
to add login names of the admin users inadminPrincipals
section as shown below. - Update the
principalDomain
to your company domain name.
In 0.12.1
the className
and containerRequestFilter
must replace org.openmetadata.catalog
by org.openmetadata.service
.
Finally, update the Airflow information:
Before 0.12.1
After 0.12.1
Note: Follow this guide to configure the ingestion-bot
credentials for ingesting data from Airflow.