[RANGER-1839] Add the ability to specify SSO token audiences

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 1.0.0
• Component/s: admin
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 16/Oct/17 14:33
• Updated: 17/Oct/17 09:34
• Resolved: 17/Oct/17 09:34

Description

The KNOXSSO service can configure an audience parameter to restrict the audience of a given issued token. However, we can't enforce this check in Ranger. This task is to add a new configuration parameter "ranger.sso.audiences", which is a comma separated String of audiences, one of which must be contained (if specified) in the received token.

Issue Links

• links to: Review Request