Integrate Workbench with Posit Connect

Workbench

Workbench can exchange the identity token a user receives at sign-in for a credential that Connect issues. The user’s session then uses that credential for later calls to Connect, so the user does not sign in to Connect separately. This process is identity federation.

Requirements

Before you begin, make sure that:

  • Identity federation is turned on in Connect.
  • Workbench and Connect use the same identity provider (IdP), and each user must exist in both products. Use an IdP that supports System for Cross-domain Identity Management (SCIM) to provision users in both products. See User provisioning for Workbench and SCIM in the Connect Administration Guide.
  • Workbench uses OpenID Connect authentication, with offline_access in auth-openid-scopes. Without it, the identity token expires shortly after sign-in and Workbench cannot refresh credentials.
  • The Workbench server and sessions can reach Connect over the network.

Configure Workbench

In /etc/rstudio/rserver.conf, set the address of your Connect server and turn on identity federation:

/etc/rstudio/rserver.conf
posit-connect-url=https://connect.example.com
posit-connect-auth-federation=1
Back to top