Feature Request: SSO integrations

[AntonAndreevichMoroz]

Is your feature request related to a problem? Please describe.
this is not a problem. this is an improvement

Describe the solution you'd like
I would like to be able to configure external user authorization. Imenoo is interested in AzureAD and SSO implementation.

[dinger1986]

So the feature request is to use single sign on using AzureAD?

[AntonAndreevichMoroz]

Yes. Exactly. My request is about AzureAD and SSO. but I think someone will be interested in authorizing through the local Active Directory or LDAP.

[dinger1986]

Ok, have changed the title to reflect this, its up to the devs of course.

I for one am quite happy its not integrated, like having these things separated out.

[davidrudduck]

I think SAML / SSO type auth would be a great addition, providing it provides the ability to tie access control to user security groups in the SSO data source.

It makes sense to integrate authentication so we dont end up with a billionty user accounts that need to be provisioned and de-provisioned when staff start and end with our companies.

We leverage LDAP or Azure AD / SAML SSO in everything we can - providing we can still use MFA.

[subzdev]

My preference would be Azure/365 before LDAP.

[FranklinClinton]

+1 for SAML auth. SSO is a requirement for a lot of organizations.

[d4-maertzdorf]

yes please, SSO / MFA with SAML (for AzureAD)

This way you'd still be able to offer MFA, through the MS AzureAD MFA functionality.

[adamjrberry]

+1 for LDAP/Azure AD SSO

[ranomier]

I fine with oauth/oauth2/openid or saml.
Something like basic auth or passing the login via http header would be fine aswell.

But please don't add ldap first. It's pain.
Thank you and to all have an wonderful day!

[JSuenram]

+1 LDAP/Active Directory

[plao]

+1 LDAP/Active Directory for me too, thanks

[swalker234]

+1 to ldap or AD radius would even be fine

[jbrouhard98]

+1 for LDAP/Azure AD SSO for me. I would also be keen on OAuth or custom Oauth's.

[netwalker0099]

+1 for SAML we use a different SSO provider

[lateTWoIT]

+1 for SSO of any kind

[Len-SVACS]

+1 for SSO. Would be amazing.

[NathanTarbert]

+1 SSO
SuperTokens wrote about a simple solution that uses OAuth 2.0 + SAML SSO that could be an easy integration if anyone wants to check it out? - https://supertokens.com/docs/thirdparty/common-customizations/saml/with-boxyhq/flow-diagram

[Neeeeeeeeeo]

+1 for LDAP/Azure AD SSO

[DollarStoreCPU]

+1 for LDAP/AzureAD/SAML (Authelia would be cool too)

[josvink66]

+1 for Azure AD SSO

[topdarkstar]

+1 for LDAP/AzureAD/OAuth/SAML

[c74infrateam]

+1 for LDAP/AzureAD/OAuth/SAML - this is important for our processes

[Henrique-Batista]

+1 for LDAP/AzureAD/OAuth/SAML

[bryanliftedit]

+1 for LDAP/AzureAD/OAuth/SAML

[bbrendon]

@wh1te909 can we lock this issue? I think we've seen enough spammers.

[wh1te909]

@bbrendon done. yes we'll eventually implement SSO but focusing on other features atm.

[wh1te909]

SSO support has just been released in 0.20.0: https://docs.tacticalrmm.com/ee/sso/sso/