Skip to main content
tableau
tableau
Silver ⭐️⭐️
Oct 15, 2025 10:19 PM UTC
Question

how to setup okta authentication with cdh impala

I have a cdp 7.3.1 instance, and I want to hookup okta authentication to the impala service, so that when tableau connects to the impala, it will trigger authentication / call back with a okta server(I already have admin controls of it, and have scope/application etc).

on this instance, I already enabled kerberos, knox and not sure if I need to enable ssl as well, I can't find any documentation for it, can some one walk me through the setup? I mostly rely on chapgpt, and had some issues. 

 

6 replies

DianaTorres
Community Manager
DianaTorres
Community Manager
Oct 16, 2025 9:49 PM UTC

Hi @jAnshula @ChethanYM @Boris G @Saurabhatiyal Hello team
Do you have any insights here? Thanks!

Translate
Regards, Diana Torres, Senior Community Moderator
jAnshula
Gold ⭐️
jAnshula
Gold ⭐️
Oct 17, 2025 8:42 AM UTC

Hi @tableau 

The Impala ODBC/JDBC drivers don’t natively support SAML authentication.
You need to use Apache Knox as the SAML Service Provider (SP). Knox handles authentication with Okta (IdP) and then proxies the authenticated session to Impala using Kerberos delegation.

Okta → SAML → Knox SSO (Gateway) → Kerberos delegation → Impala

SSL (HTTPS) is required for SAML authentication to work securely.
Please refer to the following Cloudera documentation for setup details:

https://docs.cloudera.com/cdp-private-cloud-base/7.3.1/knox-authentication/topics/security-knox-authe-saml.html 

https://docs.cloudera.com/cdp-private-cloud-base/7.3.1/knox-authentication/topics/security-knox-tls-mutual-authentication.html 

Let us know if you have any questions on the same.

Translate
DanielR
DanielR
Silver ⭐️⭐️
Oct 17, 2025 11:09 AM UTC

You can use oauth which is available in Impala now

See: https://docs.cloudera.com/cdp-private-cloud-base/7.1.9/impala-secure/topics/impala-oauth.html

Translate
DianaTorres
Community Manager
DianaTorres
Community Manager
Oct 24, 2025 9:03 PM UTC

@tableau Has the reply helped resolve your issue? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future. Thanks.

Translate
Regards, Diana Torres, Senior Community Moderator
tableau
tableauAuthor
Silver ⭐️⭐️
Oct 28, 2025 4:11 PM UTC

I need time to test the flow, and if there is a more detailed tutorial on how it is done, please send it my way. Thanks.

Translate
tableau
tableauAuthor
Silver ⭐️⭐️
Oct 28, 2025 4:52 PM UTC

I have a okta server and application / scope information, and I need guidance on how to implement the okta provider in the knox setup. The current documentation talks more about ldap, and not helpful on okta setup.

Translate
Terms & ConditionsAccessibility statement