[GH-ISSUE #156] [Feature] OIDC authentication #121

New issue

Closed

opened 2026-02-25 21:31:15 +03:00 by kerem · 4 comments

kerem commented

2026-02-25 21:31:15 +03:00

Owner

Originally created by @francescocarzaniga on GitHub (Oct 10, 2020).
Original GitHub issue: https://github.com/ciur/papermerge/issues/156

Originally assigned to: @ciur on GitHub.

I saw there is a plan to implement LDAP authentication, and the current PR does a great job at abstracting the backend including immutable users. Using it and something like mozilla-django-oidc it should be relatively straightforward to implement OIDC as well. Group management should also work exactly the same as LDAP.

Originally created by @francescocarzaniga on GitHub (Oct 10, 2020). Original GitHub issue: https://github.com/ciur/papermerge/issues/156 Originally assigned to: @ciur on GitHub. I saw there is a plan to implement LDAP authentication, and the current PR does a great job at abstracting the backend including immutable users. Using it and something like [mozilla-django-oidc](https://github.com/mozilla/mozilla-django-oidc.git) it should be relatively straightforward to implement OIDC as well. Group management should also work exactly the same as LDAP.

kerem

2026-02-25 21:31:15 +03:00

closed this issue
added the
enhancement

feature request
labels

kerem commented

2026-02-25 21:31:15 +03:00

Author

Owner

@schiederme commented on GitHub (Oct 10, 2020):

Would it be possible to sponsor this?

@schiederme commented on GitHub (Oct 10, 2020): Would it be possible to sponsor this?

kerem commented

2026-02-25 21:31:15 +03:00

Author

Owner

@ciur commented on GitHub (Oct 11, 2020):

In general, I would go as far as to say that almost any external authentication system can be added - but as extra plugin. So just to make it clear, that we speak here about - a plugin (a.k.a app) for Papermerge to support OIDC authentication. Plugins/apps can be easily removed/add so that main application stays light.

Would it be possible to sponsor this?

@schiederme, give me 2 weeks to evaluate the impact/complexity of solution and I will come back with an answer.

@ciur commented on GitHub (Oct 11, 2020): In general, I would go as far as to say that almost any external authentication system can be added - but as extra plugin. So just to make it clear, that we speak here about - a plugin (a.k.a app) for Papermerge to support OIDC authentication. Plugins/apps can be easily removed/add so that main application stays light. > Would it be possible to sponsor this? @schiederme, give me 2 weeks to evaluate the impact/complexity of solution and I will come back with an answer.

kerem commented

2026-02-25 21:31:15 +03:00

Author

Owner

@francescocarzaniga commented on GitHub (Oct 11, 2020):

@ciur If I can make a suggestion, python-social-auth and its pipelines especially would be the best solution.

@francescocarzaniga commented on GitHub (Oct 11, 2020): @ciur If I can make a suggestion, [python-social-auth](https://python-social-auth.readthedocs.io/en/latest/) and its pipelines especially would be the best solution.

kerem commented

2026-02-25 21:31:15 +03:00

Author

Owner

@ciur commented on GitHub (May 14, 2024):

Feature landed in 3.2: https://docs.papermerge.io/3.2/sso/oidc/overview/

@ciur commented on GitHub (May 14, 2024): Feature landed in 3.2: https://docs.papermerge.io/3.2/sso/oidc/overview/