How do we setup custom AUTH like OpenID, SSO with Entra ID, etc. in Airflow 3.0.x? Documentation update and clarity is required for 3.0.x stable

[piosystems]

What do you see as an issue?

There is a lack of clarity about what documentation version is stable. https://airflow.apache.org/docs/apache-airflow/stable/security/api.html points to Airflow version 3.0.3. But when I click on the https://airflow.apache.org/docs/apache-airflow-providers-fab/stable/auth-manager/index.html on the page, it takes me to a page with Airflow version 2.3.0. Does this mean that there is no Airflow version 3.0.3 equivalent for apache-airflow-providers-fab. It is confusing. I am using 3.0.3 and I am trying to implement OpenID authentication but in my installed environment, there is no such file as webserver_config.py mentioned in https://airflow.apache.org/docs/apache-airflow-providers-fab/stable/auth-manager/webserver-authentication.html which as explained indicates 2.3.0 version even though labelled stable. Is webserver_config.py still needed for airflow 3.0.3? Documentation update and clarity is very much required!

Solving the problem

No response

Anything else

No response

Are you willing to submit PR?

• Yes I am willing to submit a PR!

Code of Conduct

• I agree to follow this project's Code of Conduct

[boring-cyborg]

Thanks for opening your first issue here! Be sure to follow the issue template! If you are willing to raise PR to address this issue please do so, no need to wait for approval.

[nrnavaneet]

Would like to work on this, Can i be assigned?

[potiuk]

Sure!

[potiuk]

Does this mean that there is no Airflow version 3.0.3 equivalent for apache-airflow-providers-fab. It is confusing. I am using 3.0.3 and I am trying to implement OpenID authentication but in my installed environment, there is no such file as webserver_config.py mentioned in https://airflow.apache.org/docs/apache-airflow-providers-fab/stable/auth-manager/webserver-authentication.html which as explained indicates 2.3.0 version even though labelled stable. Is webserver_config.py still needed for airflow 3.0.3? Documentation update and clarity is very much required!

BTW. It's 2.3.0 version of the PROVIDER not Airflow @piosystems

[Pionerd]

A lot of the FAB auth docs are still referring to the apparently deprecated webserver_config.py. Even the updated docs in #53606 don't make it much clearer to me, t.b.h.

I assume the mentioned env vars in https://airflow.apache.org/docs/apache-airflow-providers-fab/stable/auth-manager/sso.html are now the way to go, but they are not being picked up. Is that a bug in and of itself or are the docs still not fully up to date?

[potiuk]

A lot of the FAB auth docs are still referring to the apparently deprecated webserver_config.py. Even the updated docs in #53606 don't make it much clearer to me, t.b.h.

I assume the mentioned env vars in https://airflow.apache.org/docs/apache-airflow-providers-fab/stable/auth-manager/sso.html are now the way to go, but they are not being picked up. Is that a bug in and of itself or are the docs still not fully up to date?

I think if you have still a problem with following latest FAB and docs, good idea is to describe exactly your problem, tell what you tried to do in detail and explain the behaviour you observed. A number of people alredy - I believed, managed to use the configuration, but maybe there is something specific for your case that does not work. Hard to say, but I am quite sure commenting on closed issue that has been - apparently - addressed and had someone who got it right and describe is not going to help, I think. If you could point out the exact places in your issue in docs you followed where the alleged deprecations you mentioned have bee mentioned, that's also good idea.

You have to remember that this project is an open-source one, many people contribute and you paid exactly 0 USD for it so the documentation is only as good as some of the time - often away from their day job and families spend on it - sometimes without full corrdination and cleanup.

Luckily - we have farnastic community that often helps and solves the issue and in the very least describe their problems in detail helping those who (again often deciding to spend their time away of day job and family) might want to help those that need help. Of course - there is also no guarantees your problem will be solved, but by very good decription of it and showing the effort made from your side, vastly increases chances to get help from those people (rather than them for example spending their time with their families).

HIghly recommend that attitude for open-source software that comes without any guarantees and absolutely for free. Contributing good description of problem and explainig what exactly the problem you had and what you tried, is absolutely least you can do.

[Pionerd]

@potiuk thank you for your quick response. In no way I meant to be disrespectful, act entitled to whatever form of help/support or criticize any contributor of this project.

The reason I stated my last message as I did was purely based on my observation that multiple pages may benefit from updates and that my personal issue may not even be that relevant in that regard. I tried to hold back precisely because I know any OSS contributor's time is valuable, not to push you in any way. Apologies if that came across differently.

I'll get back with a separate issue exactly describing what we run into.