Stirling-Tools
Option to enable automatic SSO login
Is it possible to make a option to enable Automatic SSO login when enabled in the config? As example a option like SECURITY_OAUTH2_AUTO_LOGIN=true.
If this setting is true the login screen will be skipped and redirected automatically to the SSO service.
It would be the provider you've setup in the SECURITY_OAUTH2_ISSUER. In my case it is Authentik.
The local login would not be usable unless you set the new environment variable to false so no automatic redirect would happen.
If you are using a proxy you can add a rewrite rule to do this, nginx example below.
rewrite ^/login$ /oauth2/authorization/oidc;
Is there any progress here? The silent login-option is a perfect way to prevent strangers of using the service, without causing any friction. Now it takes two clicks every day - one to select SSO and one to select the only SSO-provider configured.
The rewrite-rule is elegant, but I found that my knowledge on docker compose and nginx-proxy is limited to configure that.
I would suggest using the name of the OAUTH-provider, such that a backup can silently be configured. In case of Murphy, the fall-back SSO-provider can be enabled.
SECURITY_OAUTH2_AUTOLOGINPROVIDER=keycloak
