HOW TO INTEGRATE ZITADEL WITH SUPERSET for OAUTH

[user1500177]

Can some please help me to set up zitadel login through superset_config.py

[dosubot[bot]]

To integrate Zitadel with Superset for OAuth login, you need to configure everything directly in superset_config.py (Superset 5.x and above no longer support loading OIDC settings from a JSON file) reference.

Step-by-step setup:

1. Create a Zitadel app in the Zitadel console with type "Web" and authentication method "Code". Note the client ID and secret. Set the redirect URI to https://<your-superset-domain>/oauth-authorized/zitadel reference.

2. Install Authlib in your Superset environment if it’s not already present.

3. Add this to your superset_config.py:

   from flask_appbuilder.security.manager import AUTH_OAUTH
   from custom_sso_security_manager import CustomSsoSecurityManager
   
   AUTH_TYPE = AUTH_OAUTH
   OAUTH_PROVIDERS = [
       {
           "name": "zitadel",
           "token_key": "access_token",
           "icon": "fa-key",
           "remote_app": {
               "client_id": "<your-zitadel-client-id>",
               "client_secret": "<your-zitadel-client-secret>",
               "client_kwargs": {
                   "scope": "openid profile email",
               },
               "api_base_url": "https://<your-zitadel-domain>",
               "server_metadata_url": "https://<your-zitadel-domain>/.well-known/openid-configuration",
           },
       }
   ]
   CUSTOM_SECURITY_MANAGER = CustomSsoSecurityManager
   AUTH_USER_REGISTRATION = True
   AUTH_USER_REGISTRATION_ROLE = "Public"

4. Create custom_sso_security_manager.py in the same directory as your config:

   import logging
   from superset.security import SupersetSecurityManager
   
   class CustomSsoSecurityManager(SupersetSecurityManager):
       def oauth_user_info(self, provider, response=None):
           logging.debug("Oauth2 provider: {0}.".format(provider))
           if provider == 'zitadel':
               me = self.appbuilder.sm.oauth_remotes[provider].get('oidc/v1/userinfo').json()
               logging.debug("user_data: {0}".format(me))
               return {
                   'name': me.get('name'),
                   'email': me.get('email'),
                   'id': me.get('preferred_username'),
                   'username': me.get('preferred_username'),
                   'first_name': me.get('given_name'),
                   'last_name': me.get('family_name'),
               }

   This maps Zitadel user info to Superset user fields reference.

Troubleshooting tips:

• Make sure your redirect URI matches what you set in Zitadel.
• If you upgraded from Superset 4.x, migrate all OIDC config from JSON files into Python variables in superset_config.py reference.
• If the login page doesn’t show, check for frontend asset issues or misconfigured reverse proxy/static asset paths reference.

For more details, see the Superset OAuth config docs and Zitadel’s OIDC integration guide.

To reply, just mention @dosu.

---

^{How did I do? Good | Irrelevant | Incorrect | Verbose | Hallucination | Report 🐛 | Other}