BinderHub Authentication with OAuth - 403 Forbidden to Access binder

[viktoriaas]

Hello @manics ,
thanks for a reply. Setting default scopes as suggested in issue

403 Forbidden You do not have permission to access JupyterHub service binder AzureAD

Hi community! I fall into a problem authorizing users on binderhub. Deployment on K8s with AzureAD integration. Jupyterhub authentication\authorization works fine, but binderhub returns 403 Forbidden. You do not have permission to access JupyterHub service binder Binderhub manual for Auth doesn’t provide much information on how to authorize users Is there documentation on how link Azure AD groups with Binderhub? Thanks for the help Example of config config: BinderHub: use_registry…

solves the problem. However, it would be good to add this information and information on how to propagate groups from Authenticators to hub to documentation. It would be very helpful!

For others: If you want to allow all authenticated users to access binder and spawn a notebook, add:

jupyterhub:
  hub:
    loadRoles:
      user:
        scopes:
          - self
          - "access:services"