Configuring Authentication in Posit Workbench#

Posit Workbench can be configured with the following authentication methods:

• PAM with system accounts
• PAM with LDAP and Active Directory
• SAML 2.0
• Proxied authentication

• OIDC/OAuth 2.0

  OAuth 2.0 Using Google - Deprecated in v1.4

  While it is still possible to configure this authentication method, note that in future releases of Workbench, starting in version 1.4, this authentication method will migrate to use OpenID Connect instead; Google itself uses OpenID as an underlying authentication mechanism. Additionally, RStudio Desktop Pro clients will be unable to connect to Workbench when it is configured to use Google Authentication due to new restrictions from Google. See Google’s Notice, for more information.

  For additional information, please reference the Workbench Administration Guide.

Every Workbench user needs a local system account and home directory regardless of the authentication method used.

If you wish to use SSO authentication (SAML, Proxied, or OIDC) and automatically create users on the system, you will need to:

1. Configure RStudio Server Pro/Posit Workbench to create users using SSSD and PAM, usually against LDAP/Active Directory.
2. Configure the SSO authentication in the product.

Reference documentation for configuring authentication in Workbench.