Would it be possible to have multiple authentication methods simultaneously?

[stefanonicotri]

Hi,
is it possible to setup multiple authentication methods simultaneously?
For example, I would like my JupyterHub instance to have Google, GitHub and Local authentication method on the same login page: is it possible?
Many thanks

[minrk]

This should be possible, but it is not ready to go at the moment. A MultiAuthenticator could have various sub-authenticators and dispatch to them. The trick would be hooking up the various URLs needed.

[stefanonicotri]

Thank you very much for your suggestion :)

[zonca]

I would like to have this feature as well, even just for the authentication classes in oauthenticator...I don't have time right now to work on this myself, but I could be a beta-tester! ;-)

[jm2004]

Same here. Our project also needs more than one ways to do the authentication in different situations.
I am now trying to implement my own. But it definitely great if we have this MultiAuthenticator.

Thanks!

[cmseal]

I'd like to second this... We use FreeIPA for our team, and LDAP works fine there, but our parent company uses Google Apps. Being able to auth with either of these would be awesome. I'm looking at how it might work, but has anyone else made any progress with this? Cheers!

[betatim]

Might be worth checking out https://www.keycloak.org/ as well as investigating a MultiAuthenticator.

[ablekh]

In addition to Keycloak, there is also Gluu (http://gluu.org). Also, "a quick and ready-to-use solution off the top of my head seems to be using JupyterHub Globus authenticator, which offers Globus, OpenID, Google, SAML/CILogon and E-mail authentication in a single package. Unfortunately, it is far from ideal due to missing GitHub/GitLab integration and adding Globus infrastructure dependency" (from my post on Gitter last night).

@betatim For MultiAuthenticator, are you talking about this code: https://gist.github.com/danizen/78111676530738fcbca8d8ad87c56690?

[cjreyn]

+1 for this

[zhiyuli]

@stefanonicotri

we extended the snippet @ablekh shared above
hope this helps
https://github.com/zhiyuli/oauthenticator/tree/hydroshare/examples/multi_oauth

[ablekh]

@zhiyuli Nice work, though a more detailed README would be appreciated. However, it seems that your approach only covers OAuth-based authenticators, whereas the original code (that I have linked above) is more generic, allowing for any authenticators (assuming it's relevantly updated). Am I correct on this?

[zhiyuli]

@zhiyuli Nice work, though a more detailed README would be appreciated. However, it seems that your approach only covers OAuth-based authenticators, whereas the original code (that I have linked above) is more generic, allowing for any authenticators (assuming it's relevantly updated). Am I correct on this?

@ablekh sorry for the rushed readme. For the project I am working on, we only need to use OAuthenticators for now... and Yes, the snippet you shared seems to support any type of authenticator as the basic idea is to relay the call to the actual authenticators underneath the multiauthenticator.

[ablekh]

@zhiyuli No need to apologize - your work is much appreciated (but please ping me, if you update the description). Thank you for prompt clarifications. I just wanted to make sure that my understanding of your code is correct and I'm not missing anything relevant. I still plan to further review both the original and your code for better understanding. Thank you!

[zhiyuli]

@ablekh enriched the readme a little bit
https://github.com/zhiyuli/oauthenticator/blob/hydroshare/examples/multi_oauth/README.md

[ablekh]

@zhiyuli Thank you very much for letting me know. Nice work. I still think that using Keycloak would be the optimal approach, since (based on my limited research) it is both comprehensive and flexible. I still plan to explore this path further. Have you had a chance to look at / play with / explore Keycloak?