Disable Login when OIDC is enabled

[miloschwartz]

Discussed in https://github.com/orgs/fosrl/discussions/674

^{Originally posted by seamon67 May 4, 2025}
Now that Pangolin supports OIDC, it would be nice to be able to disable email+password login once everything is configured.

[ccoder1337]

For the product we are building at my company, service personnel manages our end users and their access through our proprietary interface. This is because our end users can use the their IdP account to access other services we provide that are cloud only. This feature is just what we are looking for. It would make the experience much more seamless.

[adrianeastles]

Would this PR help in anyway? #1132

[ccoder1337]

Yes of course, but complete bypass would be ideal for us since we configure pangolin through the API only. This is great though.

[adrianeastles]

@miloschwartz I can see you added It to the "Mid Term" stage. if you want, I could extend the current PR #1132 to include an option to disable the section (password) on the sign in page for resources.

[oschwartz10612]

@adrianeastles coming in the next release and already in dev 😄

[toddmryan]

Discussed in https://github.com/orgs/fosrl/discussions/674

Originally posted by seamon67 May 4, 2025 Now that Pangolin supports OIDC, it would be nice to be able to disable email+password login once everything is configured.

It would be great if this could be controlled by URL. For example, all access via public interface would be OIDC only, but access via private IP would provide username/password prompt. I never want to allow an admin to log in via the public interface.

[ngregrichardson]

Does this feature exist now? Can't find any reference to it.