search

snipe / snipe-it

A free open source IT asset/license management system
https://snipeitapp.com
GNU Affero General Public License v3.0
11.19k stars 3.2k forks source link

[Feature Request]: OpenID Connect (oidc) relying party support #12695

Open Firstyear opened 1 year ago

Firstyear commented 1 year ago

Is your feature request related to a problem? Please describe.

OpenID Connect is a popular alternative to SAML that has been growing in adoption an used. It is an extension of Oauth2 allowing structured user information to be provided to the relying party.

Extending Snipe-IT to support OIDC would allow integration with a broader range of authentication providers.

OIDC is defined https://openid.net/specs/openid-connect-core-1_0.html

Describe the solution you'd like

Snipe IT to allow OIDC as a parallel alternative to SAML.

Describe alternatives you've considered

n/a

Additional context

No response

welcome[bot] commented 1 year ago

👋 Thanks for opening your first issue here! If you're reporting a 🐞 bug, please make sure you include steps to reproduce it. We get a lot of issues on this repo, so please be patient and we will get back to you as soon as we can.

phil-flip commented 1 year ago

Technically, Google OAuth is already OIDC, is it not?

Firstyear commented 1 year ago

Technically, Google OAuth is already OIDC, is it not?

Google Oauth is an OIDC authentication provider. This is a request that Snipe supports being a relying party who consumes OIDC from an authentication provider such as google.

olivierlambert commented 1 year ago

+1 on this, that would be wonderful to get SnipeIT login via an SSO portal in OIDC (like Keycloak). OIDC is pretty simple to configure as an admin :) (unlike SAML and such)

Blackclaws commented 9 months ago

I have to add that its not just simpler to setup its also much less prone to misconfiguration as the relying party can pull the configuration from the attesting party. Definitely +1 on this request.

mustard123 commented 4 months ago

+1 on this, that would be wonderful to get SnipeIT login via an SSO portal in OIDC (like Keycloak). OIDC is pretty simple to configure as an admin :) (unlike SAML and such)

Keycloak would be amazing and is absolutely needed

lucboj commented 3 months ago

+1. Would be great to have an integration with Keycloak (OIDC ) 👍

yavorivanov-cw commented 3 months ago

+1, Currently snipe-it is our only SAML client in keycloak, Would be nice to have it with OIDC ❤️

soymgomez commented 3 months ago

+1! Snipe-IT need this!

allebone commented 3 months ago

Much more secure too! Great add if it can be done!

Keycloak also, here.

therealladiesman217 commented 2 months ago

Would be down to help implementing. Im looking for a FOSS project to contribute to, to get a track record in opensource development. We use snipeit in the company and would love to see oidc support.

As you already consider Integration, may i ask if there is slready something in work?

snipe commented 2 months ago

We don't have anything for OpenID support in the works presently, no. Have at ye!