![]() There are a number of “platform as a service” (PaaS) vendors in the market. One of the first cloud platforms, Heroku has been in development since June 2007, when it supported only the Ruby programming language, but now supports Java, Node.js, Scala, Clojure, Python, PHP, and Go. You can take advantage of the groups your LDAP directory uses by enabling Group Mappings, and specifying which LDAP group corresponds to which user group on your Metabase server.įind out how to create user groups and define what data they can access with permissions.Heroku is a cloud platform as a service supporting several programming languages. If you have user groups in Metabase you are using to control access, it is often tedious to have to manually assign a user to a group after they're logged in via SSO. If your LDAP setup uses other attributes for these, you can edit this under the "Attributes" portion of the form. Metabase will pull out three main attributes from your LDAP directory - email (defaulting to the mail attribute), first name (defaulting to the givenName attribute) and last name (defaulting to the sn attribute). If your organization uses LDAP, and you want to allow your users to log in via their LDAP credentials, you can do so as follows.Ĭlick the Configure button in the LDAP section of the Authentication page, and you'll see this form:Ĭlick the toggle at the top of the form to enable LDAP, then fill in the form with the information about your LDAP server. Note: Metabase accounts created with Google Sign-In do not have passwords and must use Google to sign in to Metabase. ![]() For example, if you work at WidgetCo you could enter in the field to let anyone with a company email sign up on their own. To enable this, go to the Google Sign-In configuration page, and specify the email domain you want to allow. If you’ve added your Google client ID to your Metabase settings you can also let users sign up on their own without creating accounts for them. Enabling account creation with Google Sign-In Now existing Metabase users signed into a Google account that matches their Metabase account email can sign in with just a click. Once you have your client_id, copy and paste it into the box on the Single Sign-On sections of your Metabase Admin settings page. You should leave the “redirect-url” blank. ![]() Note that when creating the app you only need to specify the url of your Metabase install in the “Javascript Origins” field. To create a new application follow the instructions from Google here. To let your team start signing in with Google you’ll first need to create an application through Google’s developer console. If you have a service you’d like to see work with Metabase please let us know by filing an issue. ![]() Learn more about authenticating with SAMLĪs time goes on we may add other auth providers. If you'd like to have your users authenticate with SAML, we offer a paid feature that lets you do just that. ![]() You can find these options in the Settings section of the Admin Panel, under Authentication. Authenticating with Google Sign-In or LDAPĮnabling Google Sign-In or LDAP lets your team log in with a click instead of using email and password, and can optionally let them sign up for Metabase accounts without an admin having to create them first. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |