https://dagster.io/ logo
#ask-community
Title
# ask-community
y

Yepher

08/17/2023, 12:25 PM
Are there instructions somewhere for how to setup Okta login for the Dagster webserver? In case it matters my instance is running in Docker/ECS. We don't want just anyone on the VPN to be able to be able to control Dagster. My Google-Foo must be weak, I keep ending up in Dagster Cloud resources. I am sure folks cannot run Dagster with production data without auth, so there must be a process to enable auth for Dagster-Webserver (formerly Dagit) somewhere
c

Cody Scott

08/17/2023, 1:22 PM
In our case we have put it behind a traefik proxy which delegates the auth portion. For the non-auth users we let them access it from a second webserver running with the
--read-only
flag. Perhaps there is a better option out there though?
y

Yepher

08/17/2023, 1:50 PM
Perhaps there is a better option out there though?
-> I hope so 🙂
c

Cody Scott

08/17/2023, 3:01 PM
I mean, that is part of the upsell of the cloud to have the auth component. So the better option (if you're not looking to implement your own) would be cloud.
y

Yepher

08/17/2023, 5:04 PM
not interested in using cloud at this point.
j

johann

08/21/2023, 3:51 PM
Cody’s setup with an auth proxy is what we recommend. The --read-only server is an optional nice to have
3 Views