Type: New Feature
Affects Version/s: None
Fix Version/s: 0.6.0
Ranger needs ability to authenticate users with SSO option provided by Knox.
https://issues.apache.org/jira/browse/KNOX-509 has details about SSO option provided by Knox.
Goal of this JIRA (
RANGER-685) is to enable Ranger UI to participate in Knox SSO.
Use cases when Knox SSO is enabled for Ranger:
1] Unauthenticated users accessing Ranger UI should be redirected to Knox SSO login page
2] Upon session timeout, users should be redirected to Knox SSO login page
3] Knox SSO flow is applicable for only web UI users
4] Ranger internal users should have an option to directly login to Ranger UI
Some details about Knox SSO are available here - https://cwiki.apache.org/confluence/display/KNOX/Web+SSO+Flows