[NIFI-13295] Remove Apache Knox SSO Integration

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0-M4
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 24/May/24 18:43
• Updated: 26/May/24 01:08
• Resolved: 25/May/24 20:18

Description

As described in NIFI-13294, custom Single Sign-On integration with Apache Knox based on JSON Web Tokens and custom public key verification should be removed from the main branch. Proxy access through Apache Knox should remain supported through the non-product-specific X-ProxiedEntitiesChain HTTP header strategy with X.509 client certificates.

OpenID Connect and SAML 2 integration continue to provide standards-based Single Sign-On solutions, obviating the need for custom cookie-based token communication and verification.

Issue Links

• links to: GitHub Pull Request #8876
• mentioned in: Page Loading...