[HIVE-24543] Support SAML 2.0 as an authentication mechanism

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.0.0-alpha-1
• Labels: pull-request-available
• Assignee: Vihang Karajgaonkar
• Reporter: Vihang Karajgaonkar
• Created: 15/Dec/20 18:31
• Updated: 22/Feb/24 09:01
• Resolved: 10/Mar/21 22:41

Description

With cloud based deployments, having a SAML 2.0 based authentication support in HS2 will be greatly useful in case of federated or external identity providers like Okta, PingIdentity or Azure AD.

This authentication mechanism can initially be only supported on http transport mode in HiveServer2 since the SAML 2.0 protocol is primarily designed for web clients.

Issue Links

• causes: HIVE-24619 Exclude unnecessary dependencies from pac4j
• Dependent: HIVE-25479 Browser SSO auth may fail intermittently on chrome browser in virtual environments
• is related to: IMPALA-10437 Support SAML 2 browser profile authentication
• is required by: HIVE-25875 Support multiple authentication mechanisms simultaneously
• relates to: HIVE-27554 Validate URL used by SSO workflow for JDBC connection
• links to: GitHub Pull Request #1791