List of SelfHosted apps, with information about their support for OpenID / SAML / LDAP / Proxy Auth
βοΈ - Supported - all functionality works including mobile apps (if any)
π - Supported, but breaks some features, mobile apps, users have to still be added manually or not maintained
β - Unsupported
β - Not known yet, to be added
Proxy Auth theoretically works on all of them, but it will break functionality, display double logins etc.
So only those explicitly working great with it will be marked as such. Otherwise it will be unsupported.
Project | OpenID | LDAP | Proxy Auth | Additional Info | |
---|---|---|---|---|---|
Apache Guacamole | βοΈ | βοΈ | βοΈ | possible issues with openid accounts not getting created in guacamole automatically | |
audiobookshelf | βοΈ | β | β | OpenID Connect support as of Version 2.6.0 Documentation | |
blink | βοΈ | β | β | ||
Bookstack | βοΈ | βοΈ | β | documentation -> Authentication |
|
Calibre-Web | β | βοΈ | π | LDAP documentation, proxy auth seems to have issues with OPDS feed, OpenID supports only GitHub and Google OAuth, but generic is being worked on | |
changedetection | β | β | βοΈ | No multi-user support, but it doesn't have that with default auth either | |
docker-mailserver | β | π | β | LDAP supported, but unmaintained. OpenID being worked on, but I wouldn't count on that as mail client support for xoauth2 is not good | |
Gitea | βοΈ | βοΈ | βοΈ | ||
GitLab | βοΈ | βοΈ | β | OpenID documentation, LDAP documentation | |
gokapi | βοΈ | β | βοΈ | documentation | |
hedgedoc | βοΈ | βοΈ | β | ||
Home Assistant | β | π | π | hass-proxy-auth for proxy auth, but for some people it breaks mobile app, hacky scripts for LDAP. More Info | |
Immich | βοΈ | β | β | OIDC is supported natively. | |
Jellyfin | π | βοΈ | β | LDAP plugin, OpenID plugin breaks apps, might be solved in the future | |
Linkding | β | β | βοΈ | ProxyAuth is supported. | |
mailcow | β | π | β | hacky ldapsync script, issue about auth | |
mailu | β | β | β | ||
matrix dendrite | β | β | β | Some work on SSO in this PR, some work on LDAP here but abandoned | |
matrix synapse | βοΈ | βοΈ | β | LDAP Provided by additional module; openid supported natively | |
miniflux | βοΈ | β | βοΈ | OpenID and ProxyAuth | |
Navidrome | β | β | π | Proxy auth works but requires you to previously create the users and add some headers. LDAP and OpenID/OIDC are planned but not a priority. | |
NextCloud | βοΈ | βοΈ | β | Install OpenID or LDAP plugin from interface to enable support | |
Paperless-NGX | β | β | π | Proxy Auth possible but doesn't autocreate users, Issue about User Management, possible hacky workaround for OpenID? | |
pihole | β | β | βοΈ | Remove local auth with pihole -a -p , then enter for no password. No multi-user support, but it doesn't have that with default auth either |
|
Portainer | βοΈ | βοΈ | β | Documentation | |
Proxmox | βοΈ | βοΈ | β | OpenID and LDAP both fully supported. Documentation here | |
Radarr | β | β | βοΈ | Can follow the guide for Sonarr | |
Sonarr | β | β | βοΈ | Docs | |
Uptime Kuma | β | β | βοΈ | Settings > Advanced > Disable Auth to avoid double login |
|
vaultwarden | β | βοΈ | β | Invitation-Based LDAP, OpenID being worked on in #2449 | |
wg-portal | β | βοΈ | β | ||
wg-ui | β | β | βοΈ | via --auth-user-header=HEADER option |
|
WikiJS | β | βοΈ | β | LDAP works natively. Supports SAML via Passport, though not officially supported. |