Configuring Authentication in Posit Workbench

RStudio is now Posit!

Our professional products have been renamed to Posit Connect, Posit Workbench, Posit Package Manager, Posit Cloud, and Posit Academy so it’s easier for folks to understand that we support more than just R. Please review our Blog post/FAQ to answer commonly asked questions about the rebrand.

Posit Workbench, formerly RStudio Workbench, can be configured with the following authentication methods:

• PAM with system accounts
• PAM with LDAP and Active Directory
• SAML 2.0
• Proxied authentication

• OIDC/OAuth 2.0

  OAuth 2.0 Using Google - Deprecated in v1.4

  While it is still possible to configure this authentication method, note that in future releases of Workbench, starting in version 1.4, this authentication method will migrate to use OpenID Connect instead; Google itself uses OpenID as an underlying authentication mechanism. Additionally, RStudio Desktop Pro clients will be unable to connect to Workbench when it is configured to use Google Authentication due to new restrictions from Google. See Google’s Notice, for more information.

  For additional information, please reference the Workbench Administration Guide.

Every Workbench user needs a local system account and home directory regardless of the authentication method used.

If you wish to use SSO authentication (SAML, Proxied, or OIDC) and automatically create users on the system, you will need to:

1. Configure RStudio Server Pro/Posit Workbench to create users using SSSD and PAM, usually against LDAP/Active Directory.
2. Configure the SSO authentication in the product.

Reference documentation for configuring authentication in Workbench.