Jamie,

You can definitely implement your own LoginIdentityProvider...

It should work just like any other extension point, meaning you build
a NAR with your extension in it and drop it in the lib directory.

We don't have an archetype for this, but you could probably start with
the processor archetype and then rename the services file in META-INF
accordingly, and change the example processor to a
LoginIdentityProvider.

After that you drop your NAR into the lib directory, add your config
section to login-identity-providers.xml, and reference the id in
nifi.properties, just like any of the others.

The LDAP and Kerberos providers both are setup like this so you can
take a look at their code:

https://github.com/apache/nifi/tree/master/nifi-nar-bundles/nifi-ldap-iaa-providers-bundle
https://github.com/apache/nifi/blob/master/nifi-nar-bundles/nifi-ldap-iaa-providers-bundle/nifi-ldap-iaa-providers/src/main/resources/META-INF/services/org.apache.nifi.authentication.LoginIdentityProvider
https://github.com/apache/nifi/blob/master/nifi-nar-bundles/nifi-ldap-iaa-providers-bundle/nifi-ldap-iaa-providers/src/main/java/org/apache/nifi/ldap/LdapProvider.java

Thanks,

Bryan


On Tue, Nov 14, 2017 at 4:10 PM, Jamie Wang <jam...@opentext.com> wrote:
> Hi,
>
> In NiFi 1.4.0, I see login for LDAP and Kerberos are supported. I am 
> integrating nifi as part of our systems of products to interoperable with 
> each other. We want to use our product's built-in login facility as the 
> authentication mechanism.  Since LoginIdentityProvider is a pluggable 
> component, is there any API support for us to develop our own pluggable 
> LoginIdentifyProvider? If so, is there any example or how do I proceed with 
> this? Appreciate any input or pointers you may have.
>
> p.s. Sometimes ago, I asked the group if anyone had load the Nifi into their 
> own process and I didn't get any answer. I assumed no one tried.... Anyway, 
> it is possible to load nifi into your own process and we have done that. The 
> login is one another thing we want to integrate with our product.
>
> Thanks.
> Jamie

Reply via email to