starred/cloudbeaver
1
0
Fork 0
mirror of https://github.com/dbeaver/cloudbeaver.git synced 2026-04-25 05:36:14 +03:00
Code Issues 212 Projects Releases Packages Wiki Activity
Page: Pass Through Authentication
Pages
API and integration AWS Cloud explorer AWS IAM AWS OpenID Authentication AWS OpenID database access via Okta AWS Overview AWS SAML database access via Okta AWS Settings Access to an existing database connection with a link Accessibility Guide Adding new database drivers Admin Password Recovery Administration Users Provisioning Administration Anonymous Access Configuration Audit Logging Authentication Database Native Authentication Microsoft Entra ID Authentication MongoDB Authentication Oracle Wallet Authentication PostgreSQL Pgpass Authentication Salesforce Authentication methods Auto and Manual commit modes Azure Permissions Basic operations Build and deploy Client Side Scripting Cloud Explorer Cloud Storage CloudBeaver AWS Update CloudBeaver AWS deployment on the AWS Marketplace CloudBeaver Community deployment from docker image CloudBeaver Community deployment in Google Cloud CloudBeaver Community deployment in Microsoft Azure CloudBeaver Community deployment on the AWS Marketplace CloudBeaver Deployment CloudBeaver Enterprise Update CloudBeaver Enterprise deployment from docker compose CloudBeaver Enterprise deployment from docker image CloudBeaver Enterprise deployment in AWS CloudBeaver Enterprise deployment in Google Cloud CloudBeaver Enterprise deployment in Microsoft Azure CloudBeaver Enterprise CloudBeaver SSL certificate configuration CloudBeaver Styling components CloudBeaver Workspace Backup CloudBeaver and Nginx CloudBeaver customer technical support information CloudBeaver localization CloudBeaver overview CloudBeaver release cycles Code of Conduct Cognito OpenID Authentication Command line parameters Configuring HTTPS for Jetty server Configuring server datasources Connect Tableau to a database using DBeaver Proxy Driver Connection Management Connection Templates Management Connection configuration Contribute your code Create Connection Custom Plugin DB Navigator Settings menu DB Navigator folders DB Navigator toolbar DBeaver Proxy driver Data Filters Data Ordering Data editor Data export Data import Database Navigator Database Object Editor Database driver CSV Database driver Files MultiSource Database driver JSON Database driver Parquet Database driver XLSX Database driver XML Demo Server Develop in Eclipse Develop in IDEA Develop in VS Code Differences between license types Domain Manager Driver management Drivers Management Entity Diagrams FAQ File based driver properties Frontend development guidelines Frontend technical overview Generate API access token Getting started Global Permissions Google authentication GraphQL API overview Grouping Panel Home How to Import License How to Migrate your CloudBeaver Enterprise Workspace How to Reassign License How to Update License How to access query history database How to change Java security properties How to connect DBeaver or CloudBeaver to PostgreSQL on a separate VM in Azure Initial data configuration JSON and Document View JWT authentication Kerberos Authentication LDAP Authentication Local Access Authentication Local Preferences Log Viewer Log customization Managing Charts Managing Preferences Managing cloud deployed services Microsoft Entra ID authentication Model Context Protocol Server Multi server license Multiple Server URLs NTLM User Authentication Okta OpenID Authentication OpenID Package localization Pass Through Authentication Password policy Plugin system Pre configured permissions for connections Product configuration parameters Product settings authentication Product settings connections Product settings data export Product settings data spreadsheet Product settings erd Product settings navigation tree Properties Editor Proxy Configuration Query Execution Plan Query History Query Manager Query manager database configuration Resource Loading Resource Manager Result Details Panel Reverse proxy header authentication Run GraphQL requests from CLI SAML SQL Assist and Auto Complete SQL Editor SQL Formatting SSH Configuration SSL Configuration Search and Replace Secret Providers Security in CloudBeaver Server API explorer Server Architecture Server Database Server Output Server configuration administration Server configuration Session Manager Settings Shortcuts Simple and Advanced View Single Sign On Snowflake OpenID database access via Okta Supported databases Teams User credentials storage Users Value Panel Visual Query Builder WebSockets Working with spatial GIS data Workspace Location Workspace on AWS and S3 Storage
1 Pass Through Authentication
dbeaver-devops edited this page 2026-04-14 07:09:43 +00:00
Table of Contents

Note

: This feature is available in Enterprise and AWS editions only.

Table of contents

CloudBeaver lets you sign in once with a federated identity provider and access cloud databases and storage without entering additional credentials.

How it works

When a user logs into CloudBeaver with a federated identity provider, the authentication token from that session is reused to access cloud resources. The user does not need to authenticate again when working with cloud databases or cloud storage.

Example: A user who logs in with their Google account can immediately open Cloud Explorer to see and connect to their GCP databases, and open Cloud Storage to access Google Cloud Storage buckets - all without entering any additional credentials.

Supported providers

Identity provider Cloud services available
Google (OpenID) GCP databases (Cloud Explorer), Google Cloud Storage (Cloud Storage)
AWS Identity Providers AWS databases (Cloud Explorer), Amazon S3 (Cloud Storage)
Microsoft Entra ID Azure databases (Cloud Explorer)

Configuration

Note

side.

  1. As an administrator, set up an Identity Provider for your cloud provider - see Supported providers.

  2. Log in using the Federated method and select the configured provider.

  3. After login, you can:

User management

A user with access in the corresponding identity provider logs in using their email address. After the first successful login, CloudBeaver automatically creates a user profile, which appears in Settings -> Administration -> Users, assigned to the default team.

Pre-configuring users

An administrator can create a user in advance and assign permissions, team membership, AWS Role ARN, or Microsoft Entra ID User ID.

For more details, see Users.

Teams

An administrator can organize users into teams to control access to connections and permissions. Teams can also be auto-assigned based on group information from the identity provider at login - no manual assignment needed.

For more details, see Teams.

CloudBeaver Documentation

CloudBeaver - Web Database Manager