Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Canned reports][User management] Login into Metabase using same Cognito credentials #844

Open
Tracked by #834
mahalakshme opened this issue Dec 27, 2024 · 0 comments

Comments

@mahalakshme
Copy link
Contributor

mahalakshme commented Dec 27, 2024

AC:

  • Login into Metabase should work with the credentials used in Avni
  • Add the working code(no need to be integration) for the below in a branch
  • Identify the risks and flows that might not work

Technical suggestion:

  • OAuth2 is inbuilt supported by Metabase only in the Enterprise and Pro editions. So the below can be done:
  • Whenever a user is created in Cognito in a Metabase usergroup, using AWS lambda create a Metabase user with same credentials for that user
    • Configure a reverse proxy for Metabase, so all traffic to it is routed via the proxy
    • Use an OAuth Proxy tool like oauth2-proxy to handle the OAuth flow with AWS Cognito and login into Metabase.

Useful links:

metabase/metabase#7662 (comment)

Inputs:

  • superset
  • create embedded dashboard - org-dashboard mapping
    - go via the server - for URL authentication
  • common login
@mahalakshme mahalakshme converted this from a draft issue Dec 27, 2024
@mahalakshme mahalakshme moved this from In Analysis to In Analysis Review in Avni Product Dec 27, 2024
@mahalakshme mahalakshme moved this from In Analysis Review to Ready in Avni Product Dec 27, 2024
@mahalakshme mahalakshme moved this from Ready to In Analysis in Avni Product Dec 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: In Analysis
Development

No branches or pull requests

1 participant