Does Kafka UI support SSO via SAML 2.0 (e.g., PingID)? #1119
-
Hi Team, We are exploring options to enable Single Sign-On (SSO) for Kafka UI using SAML 2.0, and we’re specifically looking to integrate with PingID. Could you please confirm: Is SAML 2.0 officially supported? Thanks in advance! |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
Thanks for creating the issue. Currently, we do not support SAML 2.0. Our authentication features are built on Spring Security, which does not yet include native support for SAML 2.0 (see this issue). As a workaround—which we've successfully implemented several times—you can run an OAuth2 authorization server that supports SAML 2.0 (such as Keycloak) between Kafka UI and your SAML provider. This allows you to bridge the gap and integrate SAML authentication indirectly. |
Beta Was this translation helpful? Give feedback.
Thanks for creating the issue.
Currently, we do not support SAML 2.0. Our authentication features are built on Spring Security, which does not yet include native support for SAML 2.0 (see this issue).
As a workaround—which we've successfully implemented several times—you can run an OAuth2 authorization server that supports SAML 2.0 (such as Keycloak) between Kafka UI and your SAML provider. This allows you to bridge the gap and integrate SAML authentication indirectly.