Hi All,

We currently have a multi-node NiFi cluster (1.8.0) that is secured using
the OIDC provider for authentication. We are setting up a secure NiFi
Registry (0.5.0) which our secure NiFi cluster will connect to.

What is the recommended way to connect the OIDC secured NiFi instance to
the secure NiFi Registry (only option looks to be using certs since we are
not using LDAP or Kerb)? I am assuming the only way is to do a cert import
to NiFi which will then open up all buckets to the entire cluster (based on
the permissions of the user tied to the certificate).

We are operating in a multi-tenant environment and would like to achieve
bucket level permissions for the various users of the system. Accessing the
UI of the NiFi Registry instance isn't super important, except for maybe a
couple users for which generating a couple certs isn't a big deal. However,
allowing users to only access certain buckets may be important.

For now just being able to get this hooked up is ideal. Thoughts?


Thanks in Advance,

Ryan H.

Reply via email to