NiFi Authentication
Also available as:

(Optional) Setting Up Identity Mapping

You can use identity mapping properties to normalize user identities. Once you set up identity mapping, NiFi treats identities authenticated by different identity providers (certificates, LDAP, Kerberos) the same. This allows you to avoid creating duplicate users. Additionally, you only need to set up user-specific configurations such as authorizations once per user.

  1. From the NiFi service Configs tab, click Advanced nifi-properties.
  2. Use the Filter box to search for
  3. Enter the following values:
    Table 1. Identity mapping values
    Field Sample value ^CN=(.*?), OU=(.*?)$ $1@$2 ^(.*?)/instance@(.*?)$ $1@$2
  4. Click Save.
  5. Restart NiFi using the Restart all Required option from the Action menu.


The following examples demonstrate normalizing DNs from certificates and principals from Kerberos:^CN=(.*?), OU=(.*?), O=(.*?), L=(.*?), ST=(.*?), C=(.*?)$$1@$2^(.*?)/instance@(.*?)$$1@$2