This module adds OpenID Connect (OIDC) single sign-on to Icinga Web. It places a "Login with <provider>" button on the login page for each configured provider. Users are authenticated against the chosen provider and logged in to Icinga Web.
Icinga Web SSO documentation is available at icinga.com/docs.
- Multiple providers can be configured simultaneously, each gets its own login button
- The username claim is configurable per provider: nickname (e.g. jdoe), full name (e.g. John Doe), ...
- Group mapping from a provider to Icinga Web groups is optional
- The claim used for group names is configurable per provider
- OAuth scopes can be added if needed in a special case
- User and group names can be transformed via a search/replace regex (e.g. to add a provider-specific prefix)
Icinga Web SSO and its documentation are licensed under the terms of the GNU General Public License Version 3.