LDAP and SSO Support

[ashvinnihalani]

Is there an existing issue for this?

• I have searched the existing issues

Is your feature request related to a problem? Please describe

Lack of multiuser support

Describe the solution you'd like

Support for LDAP/SSO authentication. This provided many benefits:

• Multiple user accounts without password sharing
• Don't store admin credentials in plaintext config
• Use same credentials/sessions across apps in this space ( i.e Radarr, NZBGet, Tautulli, etc)
• Opens the door for user permissions (authorization) down the road
• Improve security by offloading AuthN/AuthZ to services designed for these purposes

Describe alternatives you've considered

No real alternatives are other than using a different project. Keeping a proxy in front of the solution fails in certain use cases

Anything else?

There has been an issue opened in the past #2680 but it was closed due to lack of manpower. I am happy to help contribute/lead the development of this feature if it is not a high priority. .NET is not my strongest language so some pointers to where the relevant files to base off/refer to are located

AB#2609

[ta264]

For the record, passwords are not stored in plaintext.

[aetaric]

With radarr 5.x requiring authentication (8911386), it might be time to revisit this. A non-zero number of people have authentication off in radarr since auth is offloaded to something else like apache2's mod_auth_mellon for SAML and authnz_ldap for LDAP.

[bakerboy448]

A non-zero number of people have authentication off in radarr since auth is offloaded to something else like apache2's mod_auth_mellon for SAML and authnz_ldap for LDAP.

it's a non-issue and External auth is supported https://wiki.servarr.com/radarr/faq#forced-authentication

[RetroDadson]

With radarr 5.x requiring authentication (8911386), it might be time to revisit this. A non-zero number of people have authentication off in radarr since auth is offloaded to something else like apache2's mod_auth_mellon for SAML and authnz_ldap for LDAP.

We are currently investigating Plex auth and OIDC for extension of the current auth methods in the future, although there are some kinks to work out.

[Robin-Sch]

Is there any update for this?

[RetroDadson]

Is there any update for this?

Currently no update on this, have been having some issues with OIDC in the limited testing that's been done and trying to work through those kinks before we make this more widely available

[digitaljdr]

Any update on OIDC? :) just stood up authentik and want to sso all the apps

[bakerboy448]

When there is an update there will be a commit or PR tied to this issue.

Asking for an update does not make this appear any sooner

there are effectively no active developers for the Servarr Starrs and no one from the community is interested in helping.

[alexsalex]

Any update on OIDC?

[Robin-Sch]

When there is an update there will be a commit or PR tied to this issue.

Asking for an update does not make this appear any sooner

there are effectively no active developers for the Servarr Starrs and no one from the community is interested in helping.

Only thing you can do right now is disable authentication and then use something like oauth-proxy in front of your arr services.

[Dkhil]

Any update on OIDC?