How to implement an SSO provider with STREAMLIT

Using Streamlit
1

Hi,
I’m new to streamlit, i’m trying to develop a POC for the company, one of the questions that I have not found an answer for it on the internet is, Does streamlit support SSO support with the different providers on the market.(SAML2, …).
could any one please help or provide any resources that could help please ?
thanks

1 Like
2

I don’t know how this relates to the “official” streamlit recommendations (have you checked out streamlit-authenticator?), but one way to do it is using an authentication proxy (such as oauth2-proxy) to to inject an JWT token in the Authorization header of each request, and use st.context.headers to read the header:

jwt.decode(st.context.headers["Authorization"], options={"verify_signature": False})
1 Like
3

HI @zoltan-spire , thanks for your reply.
what I meant is how can I use an SSO provider like Okta or SAML 2 with streamlit ?
thanks

4

Hi @estem, I’ve wrote a post adding SAML to a Streamlit app if that can help!

1 Like
5

thanks for your reply…that what i was looking for .
but i have a question please, si it possible to implement SAML without use flask ? because I have an app built only using streamlit. so should I include flask t handle SSO with SAML ?

6

Streamlit can’t receive the POST request which is returned from the Identity Provider after the SSO, so you will need another server to be able to process the SAML response. (acs endpoint). You can package both apps together into a single Docker container, with a reverse proxy like NGINX to send the requests to the right server based on the subdomain (auth.your-app.com and your-app.com).

1 Like
7

thank you a lot…it is clear for me now.
You can package both apps together into a single Docker container, with a reverse proxy like NGINX to send the requests to the right server based on the subdomain
=> Do you have an example please how i can achieve that…because I’m new to python world.
thanks in advanced.

8

The principal is the same as the following example

  • Here your have 2 Streamlit applications running in the same container
  • It’s the same setup, but instead of two streamlit app, it’s one Streamlit app + one is Flask app (or any other web server app). and you can manage the where the request goes, base on the /path or subdomain.domain.tld for example