estuary / ui

A web based UI to assist in working with Estuary Flow
https://dashboard.estuary.dev/
Other
12 stars 1 forks source link

UI: Add SSO to dashboard #1129

Closed travjenkins closed 3 months ago

travjenkins commented 5 months ago

Feature

Add the ability to log into the dashboard with SSO

Notes

This is not 100% fleshed out yet as there are some known unknowns. One large known unknown is that once you add SSO Supabase will no longer auto-handle merging accounts. This means that anytime a user's email is used to fetch details could end up returning two+ accounts. The details are mentioned below with No Linking

Need to make sure when a user logs out of an SSO account that they are landed back on the SSO page.

Complications

Running SSO on local Supabase is kinda tough / impossible : https://github.com/supabase/cli/issues/1335

Docs

SSO Auth https://supabase.com/docs/guides/auth/enterprise-sso/auth-sso-saml No linking https://supabase.com/docs/guides/auth/enterprise-sso/auth-sso-saml#user-accounts-and-identities

Exampled for running local https://calvincchan.com/blog/self-hosted-supabase-enable-sso https://calvincchan.com/blog/240228_self_hosted_supabase_with_saml_attribute_mapping

Examples

This is a good example of the kind of documentation we might need to write Okta https://supabase.com/docs/guides/platform/sso/okta

travjenkins commented 5 months ago

Might need to complete this work (or something in between) https://github.com/estuary/ui/issues/998 as I don't think the V1 client supports the function signInWithSSO Still need to dig into that tomorrow.

travjenkins commented 5 months ago

We will need to figure out a UX for how a user with a new tenant gives us the domain and the path to the metadata.

travjenkins commented 5 months ago

Requires https://github.com/estuary/ui/issues/1137 complete