[CT-1484] [Feature] SSO for Redshift

[dnascimento]

Is this your first time submitting a feature request?

• [X] I have read the expectations for open source contributors
• [X] I have searched the existing issues, and I could not find an existing issue for this feature
• [X] I am requesting a straightforward extension of existing dbt functionality, rather than a Big Idea better suited to a discussion

Describe the feature

Redshift now supports native IdP Federation, for instance Azure AD. Could we add support for that?

Describe alternatives you've considered

The IAM permission is ok but it doesn't allow to distinguish and manage users as easily as AzureAD.

Who will this benefit?

Everyone using Redshift with IdP

Are you interested in contributing this feature?

yes

Anything else?

No response

[dbeatty10]

Thanks for reaching out @dnascimento !

Were you thinking about Redshift SSO within dbt Core or within dbt Cloud?

[dnascimento]

Hi, dbt core. This is specially useful for developers running tests locally

[dbeatty10]

Yeah, it makes sense to add this support 👍

There's a few things we'd need to do to make this happen:

1. https://github.com/dbt-labs/dbt-redshift/issues/219
2. Enable the applicable connection parameters within profiles.yml for dbt-redshift (implementation here using this as an example)
3. Add the new parameters here (using this as an example)

[dnascimento]

Thanks for leading this @dbeatty10 ! I can try to help with the other points. It will make dbt easier to consume

[frolundo]

Hello. Any update in this? Our redshift is SSO enabled thru Native IdP and there is a strong demand to enable this for end users for local dbt runs.

[misteliy]

Same setup for us (IdP) and it’s a high priority to switch to SSO for both dbt core and dbt cloud

[github-actions[bot]]

This issue has been marked as Stale because it has been open for 180 days with no activity. If you would like the issue to remain open, please comment on the issue or else it will be closed in 7 days.

[github-actions[bot]]

Although we are closing this issue as stale, it's not gone forever. Issues can be reopened if there is renewed community interest. Just add a comment to notify the maintainers.

[misteliy]

Thanks for reopening!

[adam-staros95]

Hi,

Is there any update in this ticket? We use DBT core heavily and managing all data warehouse developers without AzureID is becoming increasingly difficult.