plane icon indicating copy to clipboard operation
plane copied to clipboard

[FR] Support OIDC.

Open pinarruiz opened this issue 2 years ago • 5 comments

Adding OIDC support would allow for some existing user bases on different identity providers to use plane, specially on the self hosted plane, as many of us use Authentik, Keycloak or others to manage identities.

Having OIDC would also remove the need for Google and Github being mandatory.

pinarruiz avatar Mar 09 '23 15:03 pinarruiz

Thank you for taking the time to submit this feature request. Please know that it’s already on our roadmap and we’re working hard to prioritize it. In the meantime, we encourage you to upvote this item to help us ensure it receives the attention it deserves.

pablohashescobar avatar Mar 10 '23 07:03 pablohashescobar

Hi, where can I see the roadmap, I know it was on the way, but I do not know where to find it.

pinarruiz avatar Mar 10 '23 08:03 pinarruiz

Currently, we are using Plane to plan our roadmap. Since the GitHub Sync feature is now available, we will be moving our issues from Plane to GitHub

pablohashescobar avatar Mar 11 '23 18:03 pablohashescobar

+1 for keycloak. Solves all other auth issues since you could use id chaining.

PatrickHuetter avatar Mar 14 '23 14:03 PatrickHuetter

Is there already a timeline for this one as it is listed on the website as a feature for a self-hosted instance?

torbenraab avatar Jun 06 '23 15:06 torbenraab

Login via OIDC (Keycloack in my case) is probably the only serious blocker to adopt it. Let us know if you need help to test it, I'll be happy to provide a test SSO account.

olivierlambert avatar Sep 13 '23 20:09 olivierlambert

@olivierlambert Just checkout my PR and you can test it. I build everything according to the OpenID Spec. Testing was done with Authentik as we use it at our company

torbenraab avatar Sep 14 '23 10:09 torbenraab

Great! I will test it as soon I find how to build everything without Docker ^^

olivierlambert avatar Sep 14 '23 10:09 olivierlambert

Hey @pinarruiz , Can we implement Microsoft Entra ID OIDC to plane app ? What are all necessary nginx parameters required ?

RoshanCubastion avatar Jan 10 '24 08:01 RoshanCubastion

@RoshanCubastion Please try the new PR. You just have to provide the issuer and client credentials from the Entra ID Provider. It should work as expected

torbenraab avatar Jan 10 '24 16:01 torbenraab

People who subscribed here intending to use this with GitLab may find an alternative resolution building only on OAuth 2 in #4692.

almereyda avatar Jun 03 '24 22:06 almereyda