How do I integrate Delinea (Centrify) with Connect?


RStudio Connect makes it easy to use enterprise access control systems for your data science content. If your organization has Pluggable Authentication Modules (PAM) from a vendor like Delinea (previously know as Centrify), which will integrate UNIX account functionality with directory systems like Lightweight Directory Access Protocol (LDAP), you may need to make some adjustments to your configuration for Connect to work properly.

To integrate Delinea’s PAM modules with RStudio Connect, you should first ensure that the `rstudio-connect` role exists:

dzdo dzinfo rstudio-connect --roles | grep rstudio-connect

If nothing is returned, you may need to add the `rstudio-connect` role in Delinea. You should consult the documentation or the vendor point-of-contact for your Delinea installation for instructions on how to accomplish this.

Once Delinea has been prepared for RStudio Connect, you should update the Connect server configuration file:

; /etc/rstudio-connect/rstudio-connect.gcfg

Provider = pam

Service = <my-delinea-service>

Note: The <my-delinea-service> value should be replaced with the PAM service you use to authenticate Delinea sessions. If none is provided, RStudio Connect will use the `rstudio-connect` service.

Once the configuration file has been updated, you can restart RStudio Connect and log on with your LDAP or Active Directory credentials. The first user to log in will become the administrator. This can be changed using the `usermanager` command line tool, which is described in the RStudio Connect Admin Guide.