mlflow-oidc-auth

OpenID Connect (OIDC) authentication and authorization plugin for MLflow.

This plugin allows you to use OIDC for user management in MLflow, enabling single sign-on (SSO) capabilities and centralized user management.

Disclaimer

This project is not affiliated with, endorsed by, or sponsored by the MLflow Project, Databricks, the Linux Foundation, or LF Projects, LLC. MLflow and related marks are trademarks of their respective owners. Maintained by Kharkevich Engineering Lab.

Features

OIDC-based authentication for MLflow UI and API
User management through OIDC provider
User-level access control
Group-based access control
Permissions management based on regular expressions (allows or denies access to specific MLflow resources based on regular expressions and assigns permissions to users or groups)
Support for session, JWT, and basic authentication methods
Compatible with mlflow-client (basic auth)

Documentation

For detailed documentation, please refer to the docs. AI generated documentation is available at DeepWiki.

Quick Start

To get the full version (with entire MLflow and all dependencies), run:

python3 -m venv venv
source venv/bin/activate
python3 -m pip install mlflow-oidc-auth[full]
mlflow server --app-name oidc-auth --host 0.0.0.0 --port 8080

Webhook secret encryption key 🔐

Webhook secrets are stored encrypted in the database using a Fernet key. If you plan to use MLflow webhooks with secrets, set the encryption key in the environment variable MLFLOW_WEBHOOK_SECRET_ENCRYPTION_KEY before creating any webhooks. Generate a key with:

MLFLOW_WEBHOOK_SECRET_ENCRYPTION_KEY=$(python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())")
export MLFLOW_WEBHOOK_SECRET_ENCRYPTION_KEY

Important: keep this key stable across application restarts and replicas. If the key is lost or changed after webhooks are created, previously stored secrets cannot be decrypted and will cause webhook listing to fail until you restore the original key or remove/rotate the affected webhook secrets.

Development

For development quick start, please refer to the Development and Contribution section. Contribution guidelines are available in CONTRIBUTING.md.

License

Apache 2 Licensed. For more information, please see LICENSE.

Based on MLflow basic-auth plugin

https://github.com/mlflow/mlflow/tree/master/mlflow/server/auth

Release files for mlflow-oidc-auth 7.18.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for mlflow-oidc-auth 7.18.2
File	Size	Uploaded
mlflow_oidc_auth-7.18.2.tar.gz	929.7 kB	Sep 8, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for mlflow-oidc-auth 7.18.2
File	Interpreter	ABI	Platform	Reset
mlflow_oidc_auth-7.18.2-py3-none-any.whl 1.2 MB Sep 8, 2026	Python 3	none	any	Details

Total release size: 2.1 MB

Release files / mlflow_oidc_auth-7.18.2.tar.gz

Download URL	mlflow_oidc_auth-7.18.2.tar.gz
Size	929.7 kB
Tags	Source
SHA-256 checksum How to use checksums	`b492c64b45691932a338d84df3131c57e025bf8d6f1f3171aed624bdfb26d1b3`
BLAKE2b-256 checksum How to use checksums	`7cc3ab0f3325ccde1f7cecbbf43c186773b2c738882b11983e3942bde0570501`
Upload date	Sep 8, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/mlflow-oidc/mlflow-oidc-auth
Publishing commit: github.com/mlflow-oidc/mlflow-oidc-auth/tree/76a6dd0b9f246891577065639860b52a11dbf41f

Workflow

Publishing configuration: github.com/mlflow-oidc/mlflow-oidc-auth/blob/76a6dd0b9f246891577065639860b52a11dbf41f/.github/workflows/pypi.yml
Publishing logs: github.com/mlflow-oidc/mlflow-oidc-auth/actions/runs/34184380715/attempts/1

Artifact

Subject: mlflow_oidc_auth-7.18.2.tar.gz
SHA-256 checksum: b492c64b45691932a338d84df3131c57e025bf8d6f1f3171aed624bdfb26d1b3 Verifying attestations

Release files / mlflow_oidc_auth-7.18.2-py3-none-any.whl

Download URL	mlflow_oidc_auth-7.18.2-py3-none-any.whl
Size	1.2 MB
Tags	Python 3
SHA-256 checksum How to use checksums	`100bfcfcf53b0433d062eae1949167fb2ee6d0dd981d270ab7b7ca8ab1a05c67`
BLAKE2b-256 checksum How to use checksums	`7882e714541e0223c9b78b6ac42e09b28c160976315b2934f243d3bd3ec20781`
Upload date	Sep 8, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/mlflow-oidc/mlflow-oidc-auth
Publishing commit: github.com/mlflow-oidc/mlflow-oidc-auth/tree/76a6dd0b9f246891577065639860b52a11dbf41f

Workflow

Publishing configuration: github.com/mlflow-oidc/mlflow-oidc-auth/blob/76a6dd0b9f246891577065639860b52a11dbf41f/.github/workflows/pypi.yml
Publishing logs: github.com/mlflow-oidc/mlflow-oidc-auth/actions/runs/34184380715/attempts/1

Artifact

Subject: mlflow_oidc_auth-7.18.2-py3-none-any.whl
SHA-256 checksum: 100bfcfcf53b0433d062eae1949167fb2ee6d0dd981d270ab7b7ca8ab1a05c67 Verifying attestations