Hi, I am deploying a streamlit app as an azure webapp to azure. I succesfully configured Active Directory to handle user sign-in and then redirect to my app. Now I would like to access the name of the user that signed in to store it together with the entered data of the user in a database. The m…

Relying on a HTTP header such as X-Ms-Client-Principal-Name to carry identity information is not secure - they can be faked so, so easily, and in effect impersonate a user. If you are using Azure Active Directory you can configure your App Registration to include user identification in the Access T…

Hi @Kevin_Dixon , thank you very much for your input. While I also don’t like relying on http headers, it seemed to be the most robust solution for my usecase due to the Microsoft bug mentioned before. Regarding the fakability of the X-Ms-Client-Principal-Name header, I’m no specialist regarding th…

Hi @thunderbug1 without getting too much into the dark arts, its very simple with browser development tools or indeed cli tools as simple as curl to modify headers. With token in hand for a user, it would be a simple deal to use that token but modify the header and thus pretend to be another user (a…

yeah, I think just setting it in the client request wouldn’t work. This is what the documentation says about it: Access user claims in app code For all language frameworks, App Service makes the claims in the incoming token (whether from an authenticated end user or a client application) availabl…

Did anyone find a sustainable solution for this?

Hey Goyo - thanks for your prompt reply. However, I can’t really figure out, how this helps me authentication the end user with Microsoft Active Directory? Can you be a little me specific? Thanks, Mikkel

IIUC you can find the required data in the request headers, and that has been addressed (to a certain extent) in Streamlit 1.14. There are other issues discussed in the thread but they are not directly related to Streamlit.

Hi Mikkel, If you just want something basic like the logged in user email this should be enough (in version 1.14+): from streamlit.web.server.websocket_headers import _get_websocket_headers headers = _get_websocket_headers() if "X-Ms-Client-Principal-Name" in headers: user_email = headers["X…

I know I am a little late to the party, but since I wanted an authentication component for Streamlit myself (and could not immediately find something that did what I wanted), I ended up making one myself: GitHub - mstaal/msal_streamlit_authentication: MSAL Streamlit Component msal-streamlit-authen…

Get Active Directory authentification data

Deployment

Goyo November 14, 2022, 9:04pm 12

Check the second to last item in the announcement of Streamlit 1.14.0.

Topic		Replies	Views
Streamlit Next.js Component, Auth0 Authentication, Bi-Directional Messaging & Serverless APIs Custom Components	42	17352	November 2, 2024
Adding Azure Active Directory sign in/sign out using MSAL Python (handling redirects) Using Streamlit windows , azure , authentication	21	25450	January 6, 2025
:heart_eyes: UPGRADED: Simple Authentication for Streamlit Apps Show the Community! authentication	26	15379	April 6, 2026
Failed to acquire token After 2factor authentication toward Azure AD Using Streamlit authentication , discussion	2	135	July 19, 2024
New Component: streamlit-oauth Custom Components	57	22280	May 21, 2025

Get Active Directory authentification data

Related topics