How do I integrate Centrify with Connect?


RStudio Connect makes it easy to use enterprise access control systems for your data science content. If your organization has Pluggable Authentication Modules (PAM) from a vendor like Centrify, which will integrate UNIX account functionality with directory systems like Lightweight Directory Access Protocol (LDAP), you may need to make some adjustments to your configuration for Connect to work properly.

To integrate Centrify’s PAM modules with RStudio Connect, you should first ensure that the `rstudio-connect` role exists:

dzdo dzinfo rstudio-connect --roles | grep rstudio-connect

If nothing is returned, you may need to add the `rstudio-connect` role in Centrify. You should consult the documentation or the vendor point-of-contact for your Centrify installation for instructions on how to accomplish this.

Once Centrify has been prepared for RStudio Connect, you should update the Connect server configuration file:

; /etc/rstudio-connect/rstudio-connect.gcfg

Provider = pam

Service = <my-centrify-service>

Note: The <my-centrify-service> value should be replaced with the PAM service you use to authenticate Centrify sessions. If none is provided, RStudio Connect will use the `rstudio-connect` service.

Once the configuration file has been updated, you can restart RStudio Connect and log on with your LDAP or Active Directory credentials. The first user to log in will become the administrator. This can be changed using the `usermanager` command line tool, which is described in the RStudio Connect Admin Guide.