All,

I've started working on providing additional authentication mechanisms for
the NiFi user interface. Currently, only two way SSL using client
certificates is supported to authenticate users. I would like to inquire
about which other mechanisms the community would like to see implemented.

We have created a feature proposal discussing some of the options [1]. At a
high level, in additional to PKI, we are looking at

- Username/password
-- stored in a local configuration file (ie authorized-users.xml)
-- stored in a configurable LDAP
-- stored in a configurable database
- Kerberos
- OpenId Connect

What other options are important and should be added to the list? Thanks!

Matt

[1]
https://cwiki.apache.org/confluence/display/NIFI/Pluggable+Authentication

Reply via email to