Dremio Community

Authentication

Dremio supports the following four Authentication options.

  1. Local Authentication
  2. LDAP Authentication
  3. Azure AD Authentication
  4. OpenID Authentication

Enterprise Edition only

Note: LDAP, Azure AD and OpenID Authentication options are only available in Enterprise Edition

Supported login credential and access control settings for each Authentication option are provided in the following chart.

Authentication Option Login Credentials - UI Login Credentials - ODBC/JDBC/REST User Access Controls Group Access Controls
Local Username / Password &
Personal Access Token		 Username / Password &
Personal Access Token		 Yes No
LDAP Username / Password &
Personal Access Token		 Username / Password &
Personal Access Token		 Yes Yes
Azure AD Single Sign-On &
Personal Access Token		 Personal Access Token Yes Yes
OpenID Single Sign-On &
Personal Access Token		 Personal Access Token Yes No

Login Credentials

The options available for users to authenticate to Dremio over either the Web UI interface or ODBC, JDBC & Rest sessions are:

  • Username / Password - User provides a User ID and Password combination for authentication
  • Single Sign-On - User is authenticated by the configured Identity Provider including automatic authentication if already signed into the Identity Provider
  • Personal Access Token - User creates a private access token for authentication, used in place of username/password authentication in ODBC, JDBC and Rest sessions.

Note: With OpenID authentication when adding User Access Controls user names are assumed correct and not validated against a directory service.

User Access Controls

If the authentication option supports user-level access controls for PDS, VDS and other objects. When supported access to individual objects can be configured based on the User ID used for authentication.

Group Access Controls

If the authentication option supports group-level access controls for PDS, VDS and other objects. When supported access to individual objects can be configured based upon groups associated with the User ID used for authentication.

For More Information

To configure LDAP refer to Setting Up LDAP

To configure Azure AD or OpenID with Single Sign On refer to Configuring Single Sign On