mlflow-oidc / mlflow-oidc-auth

What it does

• Single sign-on for the MLflow UI and API through any OpenID Connect provider (confidential or PKCE public clients) or SAML 2.0 identity provider, with several providers side by side
• Programmatic access. automation authenticates with short-lived workload identities — Kubernetes service-account tokens or IdP client-credentials / workload-identity tokens (JWT bearer); people using the MLflow client from a laptop or notebo
• SCIM 2.0 provisioning of users and groups from your directory
• Permissions (READ, USE, EDIT, MANAGE) on experiments, registered models, prompts, scorers and AI Gateway resources, granted to users, groups or regex patterns, with deny by default
• Workspaces for multi-tenant isolation on a shared MLflow server