Access to more than one model with Embed SSO Login

Question

I’m trying to improve our access to Looker via the Embed SSO Login, so that it can support access to multiple models, from the same embed user. Our code so far is based on the example SSO Login PHP script in the Looker Codebase;

github.com

looker/looker_embed_sso_examples/blob/master/sso_embed.php

<?php

date_default_timezone_set('America/Los_Angeles');



$secret = "<your_secret_here>";



$embedpath= "/embed/dashboards/3";



$host = "<your_looker_endpoint>";

$path = "/login/embed/" . urlencode($embedpath);



$json_nonce = json_encode(md5(uniqid()));

$json_current_time = json_encode(time());

$json_session_length = json_encode(3600);

$json_external_user_id = json_encode("<db_user_id>");

$json_first_name = json_encode("<first_name>");

$json_last_name = json_encode("<last_name>");

$json_permissions = json_encode( array ( "see_user_dashboards", "see_lookml_dashboards", "access_data", "see_looks" ) );

$json_models = json_encode( array ( "<your_model_name>" ) );

$json_group_ids = json_encode( array ( 4, 2 ) );  // just some example group ids

$json_external_group_id = json_encode("awesome_engineers");

This file has been truncated. show original

The example passes a bunch of attributes to the API to determine how the embed user will be set-up, including;

nonce

time

session_length

external_user_id

permissions

models

group_ids

etc…

Presently, our SSO Login only permits access to a single model. This is causing us problems for dashboard scheduling, when after switching models, the embed model permissions are overwritten, causing errors when sending out scheduled dashboards for the previous model.

If I need the login to have access to multiple client models how should I be configuring this? Is it enough to specify multiple model names in the ‘models’ attribute?

Many thanks!

diego.campos · Answer

Hi Rob,This should be an easy fix, you can add as many model names as is required in the $json_models = json_encode( array ( “<your_model_name>” ) ); parameter.You can test this out using this tool, which I used to generate the following URI:https://learn.looker.com/login/embed/%2Fembed%2Flooks%2F1?nonce=%22HfUwV3iFe1rvPhvW%22&time=1518624558&session_length=600&external_user_id=%22test-id-123%22&permissions=%5B%22access_data%22%2C%22see_looks%22%5D&models=%5B%22model1%22%2C%22model2%22%5D&group_ids=%5B%5D&external_group_id=%22%22&user_attributes=%7B%7D&access_filters=%7B%7D&first_name=%22Testy%22&last_name=%22McTestFace%22&force_logout_login=true&signature=4fXh9aUrLbNmaL432B9djVV7HPY%3DNotice the model section of the URI has many models listed.Have a look at the tool and let me know if you have any feedback.

Access to more than one model with Embed SSO Login

1 reply

Reply

Reply

Sign up

Social Login

Login to the community

Social Login

Scanning file for viruses.

This file cannot be downloaded