How to enable normal sign in and SSO at same time.

[devyash786]

I want the user to log in with either one of them, SSO or with username and password, I want both buttons.

[dosubot[bot]]

To enable both normal sign-in and SSO simultaneously in Apache Superset, allowing users to log in with either SSO or a username and password, you can implement a custom authentication flow using a custom security manager. Here's how you can achieve this:

1. Create a custom security manager in your superset_config_docker.py file:

from flask import redirect, flash, request
from superset.security import SupersetSecurityManager
from flask_login import login_user
from flask_appbuilder.security.views import AuthDBView
from flask_appbuilder.security.views import expose

class CustomAuthDBView(AuthDBView):
    @expose('/login/', methods=['GET', 'POST'])
    def login(self):
        token = request.args.get('token')
        if token == 'SOME_TOKEN_VALUE':
            user = self.appbuilder.sm.find_user(username=request.args.get('username')) 
            login_user(user)
            return redirect(self.appbuilder.get_url_for_index)
        else:
            return super(CustomAuthDBView,self).login()

class CustomSecurityManager(SupersetSecurityManager):
    authdbview = CustomAuthDBView
    def __init__(self, appbuilder):
        super(CustomSecurityManager, self).__init__(appbuilder)

CUSTOM_SECURITY_MANAGER = CustomSecurityManager

2. Users can then authenticate either:
   • Via SSO by accessing: http://localhost:8088/login/?token=SOME_TOKEN_VALUE&username=admin
   • Via standard login form at /login with username and password

This setup allows users to choose between SSO and standard authentication, with both options available as buttons on the login page. Note that Apache Superset does not natively support enabling both Google OAuth and email-password authentication simultaneously using configuration settings like AUTH_TYPE = [AUTH_DB, AUTH_OAUTH], so a custom security manager is necessary ^[1].

To continue talking to Dosu, mention @dosu.

---

^{Help Dosu learn! Give it feedback: Great Response | Irrelevant Answer | Incorrect Sources | Too Verbose | Hallucination | Bug Report | Other}

[orangewolf]

@dosu provide an overridden login view (overriding flask_appbuilder/templates/appbuilder/general/security /login_db.html) that contains both the user/pass login and the sso button. show how to add this overridden view to the helm based deployment

[orangewolf]

Ok, I figured out a version of this that works! See this gist: https://gist.github.com/orangewolf/762aaadabdaedd98e14d5f4e0cbe5ee1
The important things are that you have to mount the loginboth.html template in to a place that the app can find it. I had a hard time with this because Argo/Helm kept messing up the jinja escapes, so we ended up mounting this as a configmap manually and then connecting to it. Wherever it ends up, you need to change line 119 to match the resulting path (appbuilder.app.jinja_loader.searchpath.append('/app/docker/pythonpath_dev/templates').