Dremio supports the following four Authentication options.
- Local Authentication
- LDAP Authentication
- Azure AD Authentication
- OpenID Authentication
[info] Enterprise Edition only
Note: LDAP, Azure AD and OpenID Authentication options are only available in Enterprise Edition
Supported login credential and access control settings for each Authentication option are provided in the following chart.
|Authentication Option||Login Credentials - UI||Login Credentials - ODBC/JDBC/REST||User Access Controls||Group Access Controls|
|Local||Username / Password||Username / Password||Yes||No|
|LDAP||Username / Password||Username / Password||Yes||Yes|
|Azure AD||Single Sign-On &
Personal Access Token
|Personal Access Token||Yes||Yes|
|OpenID||Single Sign-On &
Personal Access Token
|Personal Access Token||Yes||No|
The options available for users to authenticate to Dremio over either the Web UI interface or ODBC, JDBC & Rest sessions are:
- Username / Password - User provides a User ID and Password combination for authentication
- Single Sign-On - User is authenticated by the configured Identity Provider including automatic authentication if already signed into the Identity Provider
- Personal Access Token - User creates a private access token for authentication, used in place of username/password authentication in ODBC, JDBC and Rest sessions.
Note: With OpenID authentication when adding User Access Controls user names are assumed correct and not validated against a directory service.
User Access Controls
If the authentication option supports user-level access controls for PDS, VDS and other objects. When supported access to individual objects can be configured based on the User ID used for authentication.
Group Access Controls
If the authentication option supports group-level access controls for PDS, VDS and other objects. When supported access to individual objects can be configured based upon groups associated with the User ID used for authentication.
For More Information
To configure LDAP refer to Setting Up LDAP
To configure Azure AD or OpenID with Single Sign On refer to Configuring Single Sign On