Apache Superset single sign-on with Keycloak
Configuring Superset to log in through Keycloak over OpenID Connect: realm and client setup, the provider block, mapping Keycloak groups or roles to Superset roles and logout behavior.
Apache Superset authentication and SSO
Connecting Superset login to specific identity providers and directories, and mapping their groups to Superset roles, based on the Superset and Flask-AppBuilder documentation.
Apache Superset single sign-on with Microsoft Entra ID
Signing in to Superset with Microsoft Entra ID: app registration, tenant endpoints, group claims and the group overage limit, role mapping and keeping a break-glass admin.
Apache Superset single sign-on with Okta
Using Okta as Superset's identity provider: OIDC application setup, the groups scope, mapping Okta groups to Superset roles and deprovisioning users who leave.
Apache Superset login with Google Workspace
Letting Google Workspace users sign in to Superset: OAuth client setup, restricting to your domain, default roles for self-registered users and group-based access without directory sync.
Apache Superset LDAP and Active Directory login
Authenticating Superset users against LDAP or Active Directory: python-ldap, LDAPS or STARTTLS, search filters, group search for role mapping and the user experience compared with SSO.
Mapping identity provider groups to Superset roles
Designing AUTH_ROLES_MAPPING so access follows IdP groups: role naming, syncing at login, default roles for new users, combining mapped roles with RLS and handling users in many groups.
Securing Apache Superset OAuth login with PKCE
Adding Proof Key for Code Exchange to Superset OAuth providers: when public clients need it, why it is recommended even with a client secret and testing the flow with your IdP.
AWS IAM authentication from Superset to Aurora and Redshift
Removing stored database passwords for AWS sources with Superset IAM authentication: the feature flag, boto3, encrypted extra settings, cross-account role assumption and SSL requirements.
