auth icon indicating copy to clipboard operation
auth copied to clipboard

WIP: Add SSO via OIDC

Open smndtrl opened this issue 1 year ago • 3 comments

What kind of change does this PR introduce?

SSO via OIDC in additional to SAML

What is the current behavior?

SSO only with SAML

What is the new behavior?

SSO with SAML or OIDC possible

Additional context

This is a WIP! Not all necessary functionality is in there.

The GenericProvider was taken from @carlobeltrame PR https://github.com/supabase/auth/pull/1372

smndtrl avatar Aug 21 '24 09:08 smndtrl

Wow! Ideally we'd want this to be built by the team, but if you want to continue developing it we can have a sync some time?

hf avatar Sep 02 '24 12:09 hf

@hf Feel free to take of the code what you want/need depending on your level of NIH. There is no real novel code to begin with as I made an effort to reuse as much of the existing code paths as possible.

I'm running my modified version on-top of a hosted supabase instance and that's all I needed for now. I did it mostly to re-familiarize myself with all the OIDC flows, state keeping, etc... For a lot of things I'm working on auth has made decisions that are too opinionated to be used further down the line.

smndtrl avatar Sep 04 '24 10:09 smndtrl

Wow! Ideally we'd want this to be built by the team, but if you want to continue developing it we can have a sync some time?

I heard (some months back). that this is actually on the Roadmap. Are there any more details on when this will be implemented? It is quite crucial for us to be able to use some specific OIDC providers. With supabase not supporting this, this is a big flaw for us. We would really appreciate to have this feature.

Thanks for all your work!

nietsmmar avatar Nov 29 '24 11:11 nietsmmar

Was this closed on purpose?

nietsmmar avatar Aug 14 '25 11:08 nietsmmar

From my understanding the company wants to create the feature on their own. So I felt like I could clean up my fork as I'm taking some of my projects off of GitHub.

I moved to another approach of having OIDC on top of the auth schema with own code. That was the only way to have it work with hosted for now.

smndtrl avatar Aug 14 '25 12:08 smndtrl