About OpenID/OAuth Problem

KNIME Server
2

Hi @sayu

have a look, if this works for you:

{
  "identity-provider-name": "Google",
  "auth-server-url": "https://accounts.google.com/",
  "resource": "",
  "credentials": {
  	"secret" : ""
  },
  "additional-authorization-endpoint-parameters": "&prompt=select_account&access_type=offline",
  "additional-scopes": "profile email",
  "principal-attribute": "email",
  "redirect-rewrite-rules" : {
    "^?scope.*" : ""
  },
  "allow-opaque-access-token" : "true",
  "principal-attribute-to-username-regex" : "@<some-domain>"
}

Most importantly, the "additional-authorization-endpoint-parameters" is needed for google. The "principal-attribute-to-username-regex" entry is optional, in case you want to map emails usernames without the @ domain.

For anyone else coming here, we also have documentation here: KNIME Server Advanced Setup Guide.

Kind regards
Marvin

2 Likes