Support

Configuring RStudio Workbench / RStudio Server Pro with SAML and OneLogin

Follow

As of version 1.4, RStudio Workbench (previously RStudio Server Pro) can authenticate to your SAML IdP. RStudio Workbench is a registered app with OneLogin. This means that if you use OneLogin for your SSO provider, it should be easy to configure RStudio Workbench.

In order to configure OneLogin with RStudio Workbench:

  1. Navigate to your OneLogin administrator portal. 
  2. Under the Applications tab, click New App in the upper right corner.
  3. Search for and click on RStudio Workbench.
  4. Add any configuration details (Display Name, Description) you choose and click Save.
  5. Add the address of your RStudio Workbench server under the Configuration tab.
    1. For example, for the RStudio Demo Server at https://colorado.rstudio.com/rstudio/, the server address would be colorado.rstudio.com/rstudio. Note there is no trailing slash.
  6. Copy the Issuer URL under the SSO tab.
  7. Add any users you wish to have access to RStudio Workbench under the Access tab.
  8. Add the following to the config file (/etc/rstudio/rserver.conf) on your RStudio Workbench.
; /etc/rstudio/rserver.conf
auth-saml=1
auth-saml-metadata-url=<Issuer URL from step 6>

     9. Restart RStudio Workbench with sudo systemctl restart rstudio-server.

Any user who has been provisioned on the server should now be able to login.

Please see the RStudio Workbench Admin guide for general instructions on configuring RStudio Workbench with SAML.

Provisioning Users

RStudio Workbench requires that each user has a corresponding user on the underlying Linux server. SAML can only be used for user authentication in RStudio Workbench.  

You can provision the Linux users manually, or by joining to an LDAP/Active Directory domain. 

Running with a Proxy

If you are running RStudio Workbench behind a proxy, further configuration is required to allow the SAML IdP to redirect back to RStudio Workbench after authenticating users. Usually, setting the X-RStudio-Request header is sufficient.

Please see the RStudio Workbench Admin guide for more details.

Comments