Hello,
Need some clarification on SAML SSO support from containerized workbench. Following this link to containerize workbench:
link suggests SSSD auth to AD. Cam across this link for workbench for SAML SS authentication:
https://docs.rstudio.com/ide/server-pro/authenticating_users/saml_sso.html
Are there issues that I need to be mindful, while trying to incorporate SAML SSO with workbench instead of SSSD?
Thanks,
AN
Hi @naira,
sssd and SSO aren't an either/or in RStudio Workbench, it's a both - and.
RStudio Workbench requires that users exist on the underlying Linux host. In a containerized environment that usually means you'll use sssd to provision users in the container and mount in a persistent volume with home directories. It's also possible to create the users in some other way if you'd prefer not to use sssd.
Configuring SAMLis an additional (optional) configuration to enable an SSO experience for users, but it doesn't affect the user provisioning needs.
More on this here: Authentication in RStudio Pro Products - RStudio :: Solutions
Please feel free to reach out to your RStudio Customer Success rep if you'd like to have a live discussion with an engineer about the options here.
@alexkgold thanks, will look in the link provided. Can you elaborate on options available to create a local identity for a SAML/SSO authenticated user? Since each user session gets its own pod, I guess we dont have to worry about UID needs to be same on all workbench session pods.
We're trying to get support from RStudio engineers, but it is delayed, this forum helps keep the project move forward. Appreciate the support.
Thanks,
AN
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.
If you have a query related to it or one of the replies, start a new topic and refer back with a link.