[ 
https://issues.apache.org/jira/browse/KNOX-821?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Larry McCay updated KNOX-821:
-----------------------------
    Fix Version/s:     (was: 0.12.0)
                   Future

> Identity Assertion Providers must be able to be chained together
> ----------------------------------------------------------------
>
>                 Key: KNOX-821
>                 URL: https://issues.apache.org/jira/browse/KNOX-821
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>            Reporter: Larry McCay
>             Fix For: Future
>
>
> The provider pipeline currently is limited to a single plugin per role name. 
> Identity assertion providers are immediately in need of support for multiple 
> at the same time. Especially since the addition of the Hadoop group lookup 
> provider, we need to be able to also map principals or extract usernames from 
> principals before group lookup using regex, etc.
> It may make sense to also support multiple authentication/federation 
> providers for MFA type scenarios.
> We should consider whether we want a generic approach to being able to have 
> multiple providers across the board or whether an identity assertion specific 
> solution is prudent.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to