MIME-Version: 1.0
References: 
 <CAMgBNbHwjx7QHS3raDc0LaB4LJHB3BdT9XL=sLH1z09V7NqTVg@mail.gmail.com>
 <CA+OCxoyZH4F8oQvSerdy1Y0+PoMGAZRojhs2g=31aVPKB09RLA@mail.gmail.com>
In-Reply-To: 
 <CA+OCxoyZH4F8oQvSerdy1Y0+PoMGAZRojhs2g=31aVPKB09RLA@mail.gmail.com>
From: Asmita Thapliyal <asmita.thapliyal@gmail.com>
Date: Mon, 18 Apr 2022 14:51:44 +0530
Message-ID: 
 <CAMgBNbG34=dau_FptcYz0parLVtUobW6WELJv6-NnV597tJ9mg@mail.gmail.com>
Subject: Re: Azure AD authentication using app registration
To: Dave Page <dpage@pgadmin.org>
Cc: pgadmin-hackers@postgresql.org
Content-Type: multipart/alternative; boundary="000000000000a2497f05dcea4a35"
Archived-At: 
 <https://www.postgresql.org/message-id/CAMgBNbG34%3Ddau_FptcYz0parLVtUobW6WELJv6-NnV597tJ9mg%40mail.gmail.com>
Precedence: bulk

--000000000000a2497f05dcea4a35
Content-Type: text/plain; charset="UTF-8"

Thank you Dave for your reply!
Can it use OAUTH2 authentication available with Azure AD? I see only
options available in OAUTH2 are for google & github.
If it can be enabled could you give me some pointers on how to start
incorporating this change?

Thanks,
Asmita

On Thu, Apr 14, 2022 at 2:13 PM Dave Page <dpage@pgadmin.org> wrote:

> Hi
>
> On Thu, 14 Apr 2022 at 09:35, Asmita Thapliyal <asmita.thapliyal@gmail.com>
> wrote:
>
>> Hello!
>>
>> I don't see Azure AD authentication using app registration is
>> available for pgadmin4. I see other authentication mechanisms via LDAP,
>> OAUTH2 and kerberos.
>> Could you let me know if there is a possibility of enabling it?
>>
>
> We don't support Azure AD auth, and currently have no plans to add it.
> You're welcome to add a feature request at
> https://redmine.postgresql.org/projects/pgadmin4/issues, but it's
> unlikely any of the regular developers will work on it in the near future.
>
> However, you can (in theory - I've never tested it) use Azure Active
> Directory Domain Services to allow applications to authenticate using
> Kerberos. See
> https://techcommunity.microsoft.com/t5/itops-talk-blog/deep-dive-how-azure-ad-kerberos-works/ba-p/3070889
>
>
> --
> Dave Page
> Blog: https://pgsnake.blogspot.com
> Twitter: @pgsnake
>
> EDB: https://www.enterprisedb.com
>
>

--000000000000a2497f05dcea4a35
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Thank you Dave for your reply!<br><div>Can it use OAUTH2 a=
uthentication available=C2=A0with Azure AD? I see only options available in=
 OAUTH2 are for google &amp; github.=C2=A0</div><div>If it can be enabled c=
ould you give me some pointers on how to start incorporating this change?</=
div><div><br></div><div>Thanks,</div><div>Asmita</div></div><br><div class=
=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, Apr 14, 2022=
 at 2:13 PM Dave Page &lt;<a href=3D"mailto:dpage@pgadmin.org">dpage@pgadmi=
n.org</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"ma=
rgin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:=
1ex"><div dir=3D"ltr"><div>Hi</div><br><div class=3D"gmail_quote"><div dir=
=3D"ltr" class=3D"gmail_attr">On Thu, 14 Apr 2022 at 09:35, Asmita Thapliya=
l &lt;<a href=3D"mailto:asmita.thapliyal@gmail.com" target=3D"_blank">asmit=
a.thapliyal@gmail.com</a>&gt; wrote:<br></div><blockquote class=3D"gmail_qu=
ote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,20=
4);padding-left:1ex"><div dir=3D"ltr">Hello!<div><br></div><div>I don&#39;t=
=C2=A0see Azure AD=C2=A0authentication using app registration is available=
=C2=A0for pgadmin4. I see other authentication mechanisms via LDAP, OAUTH2 =
and kerberos.</div><div>Could you let me know if there is a possibility of =
enabling it?</div></div></blockquote><div><br></div><div>We don&#39;t suppo=
rt Azure AD auth, and currently have no plans to add it. You&#39;re welcome=
 to add a feature request at=C2=A0<a href=3D"https://redmine.postgresql.org=
/projects/pgadmin4/issues" target=3D"_blank">https://redmine.postgresql.org=
/projects/pgadmin4/issues</a>, but it&#39;s unlikely any of the regular dev=
elopers will work on it in the near future.</div><div><br></div><div>Howeve=
r, you can (in theory - I&#39;ve never tested it) use Azure Active Director=
y Domain Services to allow applications to authenticate using Kerberos. See=
 <a href=3D"https://techcommunity.microsoft.com/t5/itops-talk-blog/deep-div=
e-how-azure-ad-kerberos-works/ba-p/3070889" target=3D"_blank">https://techc=
ommunity.microsoft.com/t5/itops-talk-blog/deep-dive-how-azure-ad-kerberos-w=
orks/ba-p/3070889</a>=C2=A0</div></div><div><br></div>-- <br><div dir=3D"lt=
r"><div dir=3D"ltr">Dave Page<br>Blog: <a href=3D"https://pgsnake.blogspot.=
com" target=3D"_blank">https://pgsnake.blogspot.com</a><br>Twitter: @pgsnak=
e<br><br>EDB: <a href=3D"https://www.enterprisedb.com" target=3D"_blank">ht=
tps://www.enterprisedb.com</a><br><br></div></div></div>
</blockquote></div>

--000000000000a2497f05dcea4a35--