To enable HUE to use SAML authentication, the Service Provider (Hue) and the Identity Provider (samltest.id) must exchange meta-data to accept each others identity. The procedure to do that on the EMR master node is outlined below.
- Hue is the Service Provider and http://samltest.id is the Identity Provider in this example
- Install the tools to enable Hue to handle SAML:
- yum install git gcc python-devel swig openssl
- yum install --enablerepo=epel xmlsec1 xmlsec1-openssl
- Acquire the IDP metadata from http://samltest.id and save into samltest.xml file
- Put the xml file in /etc/hue/conf/security/samltest.xml
- Verify key and cert files exist.