Configuring the OAuth server - 7.3

Talend Data Catalog Administration Guide

author
Talend Documentation Team
EnrichVersion
7.3
EnrichProdName
Talend Big Data Platform
Talend Data Fabric
Talend Data Management Platform
Talend Data Services Platform
Talend MDM Platform
Talend Real-Time Big Data Platform
task
Administration and Monitoring
Data Governance
EnrichPlatform
Talend Data Catalog
Configure the OAuth server to enable the external authentication server using the OAuth 2.0 protocol.

Before you begin

  • As an administrator, you have obtained OAuth 2.0 client credentials from the authorization server.
  • As an administrator, you have configured the authorization server.
  • You have signed in as a user assigned to the Administrators or Security Administrators group.

Procedure

  1. Go to MANAGE > Users.
  2. In the Authentication field of the toolbar, select OAuth from the drop-down list.
  3. Click the Configure authentication icon next to the drop-down list.
  4. In the Connection tab, fill in the following fields.
    Field Action
    Client Id Enter your Client ID.
    Client Secret Enter your Client Secret.
    Authentication URI Enter the URI on the external authentication server that handles the user authentication. The result is an authorization code, which the application can exchange for an access token and a refresh token.
    Token URI Enter the URI on the external authentication server that exchanges the authentication code for an access token.
    Validation URI Enter the URI on the external authentication server that validates the access token and provides access to the user account
    Scope Enter one or more scope values indicating which parts of the user’s account an access token permits.
  5. In the Attribute Mappings tab, map the attributes from the external user account to the Talend Data Catalog user attributes, such as Login, Full Name, Email or Groups.
    To enable the automatic group assignment, you can fill in the Groups attribute with the corresponding field name in the user account information. Talend Data Catalog uses the value of this field as the security group assignment.
  6. In the Request Headers tab, click Add header and enter extra parameters to be added in the HTTP requests to the external authentication server.
  7. In the Group Mappings tab, map the group attribute from the external user account to the Talend Data Catalog group name.
    You switch from native group assignment to OAuth driven group assignment for all OAuth users. As an OAuth user, you lose the previous native group assignment the next time you log in.
  8. Save your changes.

Results

You can log in to Talend Data Catalog through the authorization server.