Authentication
Both "locally managed" users as well as "Identity Provider" managed users are supported. To ensure a high quality security posture, organizations are strongly recommended to integrate their Kubeflow based MLOps deployment with their corporate Identity Provider such as Okta.
Identity Provider (SSO)¶
OKTA¶
Below are the steps required to configure OKTA in order to integrate with the MLOps deployment.
- Create a new OIDC Web application in the OKTA Admin console
- Add the following redirect URIs:
- Login Redirect: https://
/dex/callback - Logout Redirect: https://
- Login Redirect: https://
- Collect the following parameters to be used when updating the OKTA Config Context
- Client ID
- Client Secret
- Domain
- Assign the users and/or groups to the application [based on the enterprise user and IdP group configurations]