List of SelfHosted apps, with information about their support for OpenID / SAML / LDAP / Proxy Auth
✔️ - Supported - all functionality works including mobile apps (if any)
😔 - Supported, but breaks some features, mobile apps, users have to still be added manually or not maintained
❌ - Unsupported
❔ - Not known yet, to be added
Proxy Auth theoretically works on all of them, but it will break functionality, display double logins etc.
So only those explicitly working great with it will be marked as such. Otherwise it will be unsupported.
| Project | OpenID | LDAP | Proxy Auth | Additional Info | |
|---|---|---|---|---|---|
| Adguard Home | ❌ | ❌ | ✔️ | Pass Basic Auth in reverse proxy, or remove local auth entirely | |
| Apache Guacamole | ✔️ | ✔️ | ✔️ | possible issues with openid accounts not getting created in guacamole automatically | |
| audiobookshelf | ✔️ | ❌ | ❌ | OpenID Connect support as of Version 2.6.0 Documentation | |
| blink | ✔️ | ❌ | ❌ | ||
| Bookstack | ✔️ | ✔️ | ❌ | documentation -> Authentication |
|
| Calibre-Web | ❌ | ✔️ | 😔 | LDAP documentation, proxy auth seems to have issues with OPDS feed, OpenID supports only GitHub and Google OAuth, but generic is being worked on | |
| changedetection | ❌ | ❌ | ✔️ | No multi-user support, but it doesn't have that with default auth either | |
| Dashy | ✔️ | ❌ | ✔️ | Check authentication docs | |
| docker-mailserver | ❌ | 😔 | ❌ | LDAP supported, but unmaintained. OpenID being worked on, but I wouldn't count on that as mail client support for xoauth2 is not good | |
| Forgejo | ✔️ | ✔️ | ✔️ | ||
| Gitea | ✔️ | ✔️ | ✔️ | ||
| GitLab | ✔️ | ✔️ | ❌ | OpenID documentation, LDAP documentation | |
| gokapi | ✔️ | ❌ | ✔️ | documentation | |
| Homarr | ✔️ | ✔️ | ✔️ | Check SSO documentation. Basic Auth should be doable. | |
| hedgedoc | ✔️ | ✔️ | ❌ | ||
| Home Assistant | ❌ | 😔 | 😔 | hass-proxy-auth for proxy auth, but for some people it breaks mobile app, hacky scripts for LDAP. More Info | |
| Immich | ✔️ | ❌ | ❌ | OIDC is supported natively. | |
| Jellyfin | 😔 | ✔️ | ❌ | LDAP plugin, OpenID plugin breaks apps, might be solved in the future | |
| Linkding | ❌ | ❌ | ✔️ | ProxyAuth is supported. | |
| mailcow | ❌ | 😔 | ❌ | hacky ldapsync script, issue about auth | |
| mailu | ❌ | ❌ | ❌ | ||
| matrix dendrite | ❌ | ❌ | ❌ | Some work on SSO in this PR, some work on LDAP here but abandoned | |
| matrix synapse | ✔️ | ✔️ | ❌ | LDAP Provided by additional module; openid supported natively | |
| miniflux | ✔️ | ❌ | ✔️ | OpenID and ProxyAuth | |
| Navidrome | ❌ | ❌ | 😔 | Proxy auth works but requires you to previously create the users and add some headers. LDAP and OpenID/OIDC are planned but not a priority. | |
| NextCloud | ✔️ | ✔️ | ❌ | Install OpenID or LDAP plugin from interface to enable support | |
| ownCloud Infinite Scale | ✔️ | ✔️ | ✔️ | OpenID Connect natively supported and recommended. | |
| Paperless-ngx | ✔️ | ❌ | 😔 | Proxy Auth possible but doesn't autocreate users, Issue about User Management | |
| pihole | ❌ | ❌ | ✔️ | Remove local auth with pihole -a -p, then enter for no password. No multi-user support, but it doesn't have that with default auth either |
|
| Portainer | ✔️ | ✔️ | ❌ | Documentation | |
| Proxmox | ✔️ | ✔️ | ❌ | OpenID and LDAP both fully supported. Documentation here | |
| Radarr | ❌ | ❌ | ✔️ | Can follow the guide for Sonarr | |
| SFTPGo | 😔 | ❌ | ✔️ | OIDC supported for WebUI logon only. Access via SFTP/WebDAV still depends on keys/passwords | |
| Sonarr | ❌ | ❌ | ✔️ | Docs | |
| Uptime Kuma | ❌ | ❌ | ✔️ | Settings > Advanced > Disable Auth to avoid double login |
|
| vaultwarden | ❌ | ✔️ | ❌ | Invitation-Based LDAP, OpenID being worked on in #2449 | |
| wg-portal | ❌ | ✔️ | ❌ | ||
| wg-ui | ❌ | ❌ | ✔️ | via --auth-user-header=HEADER option |
|
| WikiJS | ❌ | ✔️ | ❌ | LDAP works natively. Supports SAML via Passport, though not officially supported. |