openark / orchestrator

MySQL replication topology management and HA
Apache License 2.0
5.64k stars 933 forks source link

Using Azure AD Authentication #1485

Open BtQuentin opened 1 year ago

BtQuentin commented 1 year ago

Hello, in our company we are using Orchestrator and we want to improve the security by adding Azure AD authentication.

Orchestrator for MySQL is using HTTP authentication with two account types: database administrator and guest. Account credentials are kept in an insecure place.

The goal is to have a simple Azure AD authentication implemented in the Golang back end of the application.

The Azure AD authentication must be an option to activate, not a replacement for the current security mechanism.

A new interface screen to connect to Orchestrator must be added.

We have already a working fork with Azure AD, but we want to add it to the official repo.

This is only a proposal.

Feel free to discus about it and let me know if it's a good idea for you or not !

Thank's