Skip to content

Implement OpenID Connect (OIDC) SSO#827

Open
rnsrk wants to merge 1 commit into
protegeproject:masterfrom
soda-collections-objects-data-literacy:mr/1-implement-oidc
Open

Implement OpenID Connect (OIDC) SSO#827
rnsrk wants to merge 1 commit into
protegeproject:masterfrom
soda-collections-objects-data-literacy:mr/1-implement-oidc

Conversation

@rnsrk

@rnsrk rnsrk commented May 5, 2026

Copy link
Copy Markdown
Contributor

Summary

Adds optional OpenID Connect sign-in (authorization code flow) for IdPs such as Keycloak.

Why

  • SSO for deployments that already use OIDC.
  • Configuration via WEBPROTEGE_OIDC_* env vars (not webprotege.properties).
  • Discovery from {issuer}/.well-known/openid-configuration.
  • Local users matched/provisioned by username claim (default preferred_username).

Docs

Readme documents env vars and /webprotege/oidc/login / /webprotege/oidc/callback.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant