[Other] Support some form of central user management

[jacksgt]

Hello,

it's really nice to see that there is so much excitement around this revived project - thanks to everyone involved.

I was wondering if anyone else is interested in having a proper SSO intergration for Paperless?

I'm using Authentik for centralized user management, but at the moment Paperless maintains its completely separate user database.
It would be great to have a OpenID connect / Oauth2 / LDAP / SAML intergration, so users who are already signed up with the central IdP (Identity Provider) can immediately start using paperless without first having to create a "local" account.

I am aware that is is currently possible to configure an authentication proxy in front of Paperless which passes the username as an HTTP header, but that is a) a bit of a security nightmare and b) doesn't automatically create the accounts in the Paperless database.

[ciphermenial]

I am interested in this also. I am wondering how difficult it would be to add django-allauth support?

[zion2k]

Hello, I am also interested in an LDAP integration.

[mercxry]

+1 for ldap

[ciphermenial]

I have managed to get django-allauth working. It doesn't look pretty but I can sign in using my Keycloak server. I am not a developer so I fudged it until I got it working.

I have written an article of the changes I made. The problem is that it uses the default django-allauth templates for login and I don't know enough to make it work with the existing login.html.

[Mortein]

It seems this is being worked on in #1746

[github-actions[bot]]

This discussion has been automatically locked since there has not been any recent activity after it was closed. Please open a new discussion for related concerns.