Enable secure login to NiFi with no ldaps configuration

[#1]

Hi All,

I want to secure login to NiFi and NiFi is installed only on one server.

There is no ldaps connectivity and connection to ldap is established with ldap://<hostname>:<port>

There is no CA and we can generate certificates on the server using OpenSSL.

With the above conditions can I secure NiFi login via certificates and login id / password?

@TimothySpann can you help me on this.

[#2]

https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html

https://docs.cloudera.com/HDPDocuments/HDF3/HDF-3.3.1/nifi-security/content/user_authentication.html

https://bryanbende.com/development/2017/10/03/apache-nifi-openid-connect

You can use this identity provider

https://github.com/BatchIQ/nifi-file-identity-provider-bundle

You have some other options built in

User Authentication

Lightweight Directory Access Protocol (LDAP)
Kerberos
OpenId Connect
Apache Knox

If you are using AWS or another cloud provider you can lock NiFi to your IP