SSO and/or LDAP login for Ghost?

Developer help
1

Hi,

My team and I are currently looking into Ghost and we planned out most of the implementation and deployment – great docs for these by the way.

I was curious to see how other users are handling SSO and/or LDAP authentication, as we are in a heavily restricted VPC and adding in users locally would be a non-starter for our security review.

I see a FR here: Feature Request: Single Sign On (SSO) using third party application like keycloak · Issue #9919 · TryGhost/Ghost · GitHub, as well as a post here Third party Single Sign On (SSO) and Auth via LDAP or OAuth , and it seems like not much discussion have been brought up for this.

What it comes down to, it seems as though my options are:

  1. Put an LDAP auth guard behind ghost or
  2. Write out our own SSO integration into the codebase

I’m asking to see if the community has something already that I can look into and work off of, or if there are plans/timelines for SSO integration , or has another direction I can go into the rabbit hole of in terms of getting/developing a solution for this.

Thanks!

4 Likes
3

Hey! It looks like the direction we’re going to do is to build the solution ourselves.

It looks like SSO and such are only available on their top tier plans, which is unfortunate but expected.

-Andrew

2 Likes
4

Hi @AndrewLien,

Have you had any luck with implementing a custom SSO module in Ghost?
I was wondering if you guys, by any chance, plan to make the module open source.

Thanks

1 Like
6

Andrew, did you guys end up being able to build SSO? You’re right that it hasn’t received enough coverage in the forum. Would love to have this functionality

1 Like
7

this feature would be fantastic

1 Like
8

Was any work on implementing oauth2 open sourced?

9

Bump for SSO interest on Ghost

4 Likes
10

Bump. Currently evaluating Ghost.

Something like SSO / OpenID / LDAP would be super helpful.

Any news on that?

2 Likes