Hi folks, I’m working on implementing a Jupyter Notebook interactive app in our setup, from the bc_example_jupyter repo ( GitHub - OSC/bc_example_jupyter: Batch Connect - Example Jupyter Notebook Server ). We use Shibboleth for auth, which has worked well so far, but I’m having an issue with the Shi…

We’re not super well versed in Shibboleth, but I’d imagine folks have gotten this to work, because, well without it, OnDemand is a bit useless. Looking at the documentation you need a shib_auth.conf that holds ShibCompatValidUser On I just want to verify that you’ve got that configuration. Beyon…

Thanks for the input, Jeff. Indeed, we have ShibCompatValidUser On in shib_auth.conf

OK then we can look into the session tab fails to load properly. Are you sure it’s an issue with authentication? I mean are you getting 403 forbidden errors from apache? If so, maybe you can turn on debug or trace level logging to see what’s going on specifically with the cookie edits to find out …

It actually manifests as a CORS block: notebook_core.4799ce7e762b693682b6.js?v=4799ce7e762b693682b6:114683 WebSocket connection to ‘wss://ondemand-dev.it.emory.edu/node/ip-10-66-251-136.ec2.internal/6071/api/events/subscribe’ failed Access to fetch at ‘``https://login.emory.edu/idp/profile/SAML2/R…

Hmmmmm, that’s odd. Maybe you’re able to add that header through an apache directive? You can use custom_vhost_directives to add directives to the vhost (also custom_location_directives to add directives to every location). Something like this maybe (you’ll have to account for the actual hostname …

That didn’t change the behavior, unfortunately. IIRC Access-Control-Allow-Origin is a response header so can’t really be changed via the vhost. I’ve also tested with attempts at removing the auth items from the /node location (AuthType/ShibRequestSetting/RequestHeader/Require) to no avail; Apache hi…

[image] martin.joseph.burke: IIRC Access-Control-Allow-Origin is a response header so can’t really be changed via the vhost. Yea but the directive is RequestHeader to edit request headers. In any case, maybe you can try to use the current tab? In the view.html.erb you probably have target="…

@jeff.ohrstrom Do you know if any institution have successfully deployed OOD with Jupyter Interactive app behind Shibboleth? If there is, we would like to reach out to understand their setup.

I pulled that topic from searching Shib on this forum, there may be others. https://discourse.openondemand.org/search?q=Shib%20order%3Alatest

Jupyter interactive app with Shibboleth SSO

Get Help

jeff.ohrstrom (Jeff Ohrstrom) August 20, 2025, 3:06pm 10

You can try to ping the folks on this topic - from the looks of it they run shibboleth and have Jupyter running. They appear to be from the University of Virginia.

Topic		Replies	Views
Blank Screen for Interactive Jupyter Session Get Help	14	420	April 7, 2024
Blank page when connecting to a Jupyter interactive session over HTTPS Get Help	6	216	December 12, 2025
Jupyter app ask for password first time, works second time Get Help question	15	4333	May 26, 2022
Jupyter interactive app question - launching, but not providing link to Get Help	3	1387	May 26, 2022
Blank screens and proxy errors with Jupyter interacrive app Get Help	5	800	May 26, 2022

Jupyter interactive app with Shibboleth SSO

Related topics