Registry / auth-security / mlflow-oidc-auth

mlflow-oidc-auth

library7.3.1pypypiunverified

OIDC authentication plugin for MLflow tracking server. Version 7.0.3, requires Python >=3.10. Provides OAuth2/OIDC integration for MLflow, supports token-based auth, group-based permission filtering, and MLflow's REST API auth middleware. Active development with regular releases.

auth-security ai-ml aws

pip install mlflow-oidc-auth

github ↗package ↗docs ↗

INSTALL

IMPORT

SIG · MLFLOW-OIDC-AUTH

mlflow-oidc-auth

auth-securitypythonv7.3.1

Install

34.2s avg

Import

—

Disk

582MB

Pass rate

6/ 10

Env Coverage6 / 10

glibc

3.9–3.13

musl

3.9–3.13

Install & Compatibility

Where this runs

tested against v7.3.1 · pip install

no network on importno background threads

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

glibc

py 3.10

✕ build_error

✓ 40.9s

py 3.11

✕ build_error

✓ 39.6s

py 3.12

✕ build_error

✓ 36.6s

py 3.13

✕ build_error

✓ 36.8s

py 3.9

✓ —

✓ 16.9s

582MB installed

● package 582MB

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

create_oidc_app

✓ from mlflow_oidc_auth import create_oidc_app

✗ from mlflow_oidc_auth import create_oidc_app

Basic Flask app with OIDC auth. Requires environment variables for issuer, client ID, and secret.

import os from mlflow_oidc_auth import create_oidc_app from flask import Flask app = Flask(__name__) app.secret_key = os.environ.get('SECRET_KEY', 'changeme') oidc = create_oidc_app( app, issuer=os.environ.get('OIDC_ISSUER', 'https://example.com/auth/realms/myrealm'), client_id=os.environ.get('OIDC_CLIENT_ID', 'my-client'), client_secret=os.environ.get('OIDC_CLIENT_SECRET', ''), token_endpoint=os.environ.get('OIDC_TOKEN_ENDPOINT', ''), userinfo_endpoint=os.environ.get('OIDC_USERINFO_ENDPOINT', ''), ) if __name__ == '__main__': app.run(debug=True)

Debug

Known issues

breakingVersion 7.x changed the import path from `mlflow_oidc_auth.oidc` to top-level `mlflow_oidc_auth`. Old imports will fail.

fix

Use `from mlflow_oidc_auth import create_oidc_app` instead of `from mlflow_oidc_auth.oidc import ...`.

affects: >=7.0.0

deprecatedThe `token_endpoint` parameter is deprecated and may be removed in future; use the `token_endpoint` from the OIDC discovery document.

fix

Omit `token_endpoint` and `userinfo_endpoint` if your issuer supports OIDC discovery (well-known/openid-configuration).

affects: >=5.0.0

gotchaSession secret must be set before `create_oidc_app` is called; otherwise session encryption fails silently.

fix

Set `app.secret_key` before invoking `create_oidc_app`.

affects: all

gotchaThe plugin requires MLflow to be installed with extras `[auth]` or in `server` mode. Without MLflow, imports succeed but runtime fails.

fix

Install MLflow with the `auth` extra: `pip install mlflow[auth]`.

affects: all

Upgrade

Version history

7.3.1latest on PyPI · released May 22, 2026

Audit

Dependencies

No dependency data recorded yet.

Agent activity

30 hits · last 30 days

node

OpenAI (training)

Resources

githubhttps://github.com/mlflow-oidc/mlflow-oidc-auth ↗

packagehttps://pypi.org/project/mlflow-oidc-auth/ ↗

docshttps://github.com/mlflow-oidc/mlflow-oidc-auth/tree/main/docs/ ↗