OpenObserve Authentication Challenges and Logout Issue
TLDR Gaurav asked about disabling OpenObserve's default authentication while also using keycloak IDP and faced issues with signing out. Ashish stated such configurations are currently unsupported. Prabhat mentioned future planned support for SSO.
Ashish
Fri, 29 Sep 2023 04:40:51 UTCHi Gaurav
Ashish
Fri, 29 Sep 2023 04:41:25 UTCas of today its not possible to disable default authentication
Gaurav
Fri, 29 Sep 2023 04:43:28 UTCOK, thanks for the confirmation.
Gaurav
Fri, 29 Sep 2023 04:49:10 UTCAlso, we are having challenges with logout as well. As double authentication(Keycloak and OpenObserve Auth) is there, we are not able to completely log out from our solution on Signing Out from OpenObserve. Is it possible to redirect to a different URL(Keycloak Logout URL ) while signing out from the OpenObserve application? If there are some configuration options available at the helm chart level?
Ashish
Fri, 29 Sep 2023 04:52:09 UTCsorry to say..but it is also not supported today
Gaurav
Fri, 29 Sep 2023 06:02:54 UTCok
Prabhat
Fri, 29 Sep 2023 11:31:41 UTCWe will be supporting SSO using solutions like keycloak for self hosted solutions, but that will take some time -
OpenObserve
Indexed 419 threads
OpenObserve is an open-source, petabyte-scale observability platform for the cloud native realm, offering a 10x cost reduction and 140x less storage use compared to competitors like Elasticsearch or Splunk. Built in Rust for exceptional performance, it offers comprehensive features like logs, metrics, traces, dashboards, and more | Knowledge Base powered by Struct.AI
View in App
Gaurav
Fri, 29 Sep 2023 04:39:36 UTCHello Everyone, we have integrated OpenObserve with our Solution. This is regarding the OpenObserve Default Authentication. As a part of our solution, we have integrated keycloak IDP as well for Authentication and the requirement is not to have double authentication ( we want to disable the default OpenObserve Default Authentication ) as there are _issues while making API calls to OpenObserve due to double authentication_(while Ingesting the data and importing the dashboard, in our case.) Basically, our auth solution utilizes Authorization header and expects a bearer JWT token for API and OpenObserve APIs are also expecting Basic auth in the same Authorization header, hence there is a conflict. Please suggest if we can disable the default authentication.