Feature Request: Modern Authentication (OIDC, SAML)

any news on this?

Yes, OIDC has been implemented in version 1.4.0 and then improved over the versions after it.

I will be closing this as completed : https://docs.patchmon.net/books/patchmon-application-documentation/page/setting-up-oidc-sso-single-sign-on-integration

any news on this?

I've been working on an OIDC/SSO implementation in my fork and have it running in production with Authentik as the identity provider. The implementation includes:

• Full OIDC authentication flow with PKCE
• Automatic user provisioning from IdP
• Group-to-role mapping (sync admin/user roles from IdP groups)
• Secure token handling via httpOnly cookies
• Database migrations for OIDC fields

I'm currently working through some edge cases before submitting the PR. I've also pulled in a few community PRs (like SSH terminal access) which needed slight modifications to work with OIDC's cookie-based authentication instead of localStorage tokens.

Planning to submit a clean PR shortly.

Really looking forward the PR :)

Fantastic work and well done, really appreciate the input, help and time you've spent on coding it through.

I'm going through all the code base and working on the PRs and merges.

Thanks
iby___

I've been working on an OIDC/SSO implementation in my fork and have it running in production with Authentik as the identity provider. The implementation includes:

• Full OIDC authentication flow with PKCE
• Automatic user provisioning from IdP
• Group-to-role mapping (sync admin/user roles from IdP groups)
• Secure token handling via httpOnly cookies
• Database migrations for OIDC fields

I'm currently working through some edge cases before submitting the PR. I've also pulled in a few community PRs (like SSH terminal access) which needed slight modifications to work with OIDC's cookie-based authentication instead of localStorage tokens.

Planning to submit a clean PR shortly.

If it could be possible, please don't limit SSO to enterprise, it is an important security feature that would be useful for all. Say no to sso.tax.

Don't worry, I wont be limiting SSO to enterprise plans :)

If it could be possible, please don't limit SSO to enterprise, it is an important security feature that would be useful for all. Say no to sso.tax.

Hey this would be a great feature for enterprise use to, as this would allow Azure User/Role provisioning, for example👍🏻

@9technologygroup #106

• Thank you , we will keep this in front of us when we rebuild the authentication mechanism.