OpenMetadata: Azure SSO Failing After Upgrade to 1.1.0

Affected module

UI Authentication/SSO

(Running in docker compose)

Describe the bug

After upgrading from version 1.0.2 to version 1.1.0, the Azure SSO now fails. We are using the same env file as we used before. Login completes, but the UI returns to the /signin page. We have noted in the logs that there is a 404 error for the /callback URI.

We followed these instructions to setup the Azure SSO: https://docs.open-metadata.org/v1.0.0/deployment/security/azure/docker#13-after-0130

We compared our file to the “updated” instructions here, it appears to be the same: https://docs.open-metadata.org/v1.1.0/deployment/security/azure/docker

We have also tried clearing our cache, different browsers, and browsers in private/incognito modes.

If we down the containers and restart them without the --env-file openmetadata_azure.env flag, then we can access the UI using the default admin user.

To Reproduce

  • Go to the URL for your OpenMetadata UI
  • Enter login credentials in the Azure SSO dialog
  • Returns to /signin page

Expected behavior

Logs into the main UI as an authenticated user with Azure SSO.

Version:

  • OS: Ubuntu 22.04
  • Python version: 3.10.6
  • OpenMetadata version: 1.1.0
  • OpenMetadata Ingestion package version: openmetadata-ingestion==0.13.3.1 (we are only using the openmetadata tools to backup the SQL DB)
  • docker version: Docker version 24.0.2, build cb74dfc
  • docker compose version: Docker Compose version v2.18.1

Additional context

We are using docker compose to directly execute the containers using the downloaded docker-compose.yml file with the additional --env-file flag as noted in the instructions.

About this issue

  • Original URL
  • State: closed
  • Created a year ago
  • Comments: 16

Most upvoted comments

@chirag-madlani Give me some time. That system is not one I am regularly using, I have to see if I can switch it back to using Azure (it’s a POC system, and some others are testing items there…). I’ll get you some logs ASAP.