About AlokKumar

AlokKumar · ‎05-26-2026

Hello we have single user based NiFi but in reality around 15 to 20 people use that instance. How to know who added a process group or stopped a processor and at which point of time was that processor stopped? Do we have any IP getting recorded or anything like that? Is it possible in NiFi having OIDC/Oauth2 based authentication that which user added/removed something?

AlokKumar · ‎05-12-2026

Hello Thank you for your detailed steps. What all should discovery url (https://idp.company.com/.well-known/openid-configuration) generally return in the response?

AlokKumar · ‎05-11-2026

Hello I need help to setup oidc based login mechanism for NiFi. I came across this article https://docs.cloudera.com/cfm-operator/2.10.0/configure-nifi-cr/topics/cfm-op-configure-nifi-cr-oidc-auth.html but I want to know how to do it for some provider other than Keycloak. I have an internal provider. Also when I read this article I saw some terms like Discovery url and "The clientID and clientSecret fields are provided to NiFi in a Kubernetes secret. Create that secret with the following command: kubectl create secret generic oidc-client-secret --from-literal=clientID=[***YOUR CLIENT ID***] --from-literal=clientSecret=[***YOUR CLIENT SECRET***] I am quite new to these terms and wanted to know how to do it in NiFi. Is kubernetes required? I have installed both NiFi 1.23 and NiFi 2.8 on a simple machine.

AlokKumar · ‎05-07-2026

Thank you @MattWho

AlokKumar · ‎05-05-2026

Hello I need to invoke a url which is protected by oauth2. I know to invoke simple apis but not with oauth2. How can we make a flow?

AlokKumar · ‎04-06-2026

I am working with Apache NiFi and trying to replicate a pattern that we had done in existing system. In existing system, we have multiple (around 10) email accounts, and we iterate over them using a loop, connecting to each mailbox, reading emails, and processing them. In NiFi, I have configured a ConsumePOP3 processor and it works fine for a single email account. However, I need to handle multiple email accounts in a scalable and maintainable way. We are not able to connect any processor or something before ConsumePOP3.

AlokKumar · ‎10-14-2025

Hello I need help how to make a flow which can handle 2 pieces of data from user. Let us consider a scenario-> User submits a form having some fields like name, age, address and also a file having something say a list of his hobbies(just for example). How do we process these together and return a response back? I have my flow like this HandleHttpRequest->ExecuteScript (Groovy)-> HandleHttpResponse I am able to do one logic only that either handle the json body say {"name":"Test Name","age":"25","address":"Test address"} or the file which gets sent. How to process both inside my Groovy Script?

AlokKumar · ‎09-24-2025

Thank you for your advise above. That really helped. Now one new thing I am observing is that I can't see Data provenance from admin or user accounts. So I right clicked on the process group->and clicked on the "Manage Access Policies"-> dropdown which was showing the "View the component"-> changed it to "View Provenance" and then added the users. But still I can't see the data provenance icon when I right click any processor to check. This is for both the admin or user accounts.

AlokKumar · ‎09-24-2025

ok thank you I will check. But how to provide access to the Component Toolbar to the users who are not admin? I have overriden that option("which is visible in screenshot from the main question and you also discussed that in your answer above) from admin account and added this user but now that user can only go inside that processor group and things are no longer grey in the processor group but still that user can't bring new processor from the Component Toolbar as whole section is still grey. New Update: So now 5 mins later I went to the admin account again, right clicked on a certain processor-group and clicked on the "Manage Access Policies"-> dropdown which was showing the "View the component"-> changed it to "Modify the component". After this the user is able to bring new processors to that processor group. Is it correct approach? Do I need to provide any more accesses?

AlokKumar · ‎09-23-2025

Hello I have configured certificate based authorization by using manager-authorizer in nifi.properties and then adding property name ="Initial Admin Identity" in <userGroupProvider> and <accessPolicyProvider> sections of authorizers.xml Now once I do that and import admin cert (which I specified in authorizers.xml) then I can access NiFi and I can bring comonents/processors from Component Toolbar. I can also add users from the Global Menu "Users" section or Add Policies. Issue I am experiencing is that the user I added can only view the processors groups and can't modify them. Apart from this the whole component toolbar is grayed out so not accessible. I went to my admin account and added that user in some Policies but this did not help. I saw in some article that we need to right click on certain processor group and then go to "Manage Access Policies" but surprisingly for my admin account the Add User icon is gray and not able to click it. I have added two photos one showing my user component toolbar being inaccessible and another one my admin cert logged in NiFi where I see Add User icon not accessible.(Note I can add user from Global Menu) How to resolve this? Can someone please advise. I want to provide access to users so that they can do their work in one processor group.

Online	Offline
Last Visited	‎05-26-2026 09:48 AM

Member Since	‎08-19-2024 04:34 AM
Last Visited	‎05-26-2026 09:48 AM
Posts	36
Kudos received	8

Cloudera Community

Re: Flowfile is currently penalized in Apache NiFI...

Can we detect who did a particular operation in Ni...

Re: How to configure oidc based login mechanism fo...

How to configure oidc based login mechanism for Ni...

Re: How to invoke a url in nifi which is protected...

How to invoke a url in nifi which is protected by ...

Handling multiple email accounts in NiFi using Con...

How to handle a json body and file in the same req...

Re: Using certificate based authorization/authenti...

Re: Using certificate based authorization/authenti...

Using certificate based authorization/authenticati...