| id | druid-pac4j |
|---|---|
| title | Druid pac4j based Security extension |
Apache Druid Extension to enable OpenID Connect based Authentication for Druid Processes using pac4j as the underlying client library. This can be used with any authentication server that supports same e.g. Okta. This extension should only be used at the router node to enable a group of users in existing authentication server to interact with Druid cluster, using the Web Console. This extension does not support JDBC client authentication.
druid.auth.authenticatorChain=["pac4j"]
druid.auth.authenticator.pac4j.type=pac4j
|Property|Description|Default|required|
|--------|---------------|-----------|-------|--------|
|druid.auth.pac4j.oidc.clientID|OAuth Client Application id.|none|Yes|
|druid.auth.pac4j.oidc.clientSecret|OAuth Client Application secret. It can be provided as plaintext string or The Password Provider.|none|Yes|
|druid.auth.pac4j.oidc.discoveryURI|discovery URI for fetching OP metadata see this.|none|Yes|
|druid.auth.pac4j.oidc.cookiePassphrase|passphrase for encrypting the cookies used to manage authentication session with browser. It can be provided as plaintext string or The Password Provider.|none|Yes|