# Third party Single Sign On (SSO)

**URL:** <https://forum.ghost.org/t/third-party-single-sign-on-sso/3321>\
**Category:** Ideas\
**Created:** [September 27, 2018, 4:12pm UTC](https://forum.ghost.org/t/third-party-single-sign-on-sso/3321 "2018-09-27T16:12:58Z")\
**Posts on this page:** 2\
**Page:** 3

<div class="post-metadata">

**Author:** ![satonotdead](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/satonotdead/32/33666_2.png) [@satonotdead](https://forum.ghost.org/u/satonotdead)\
**Post date:** [August 12, 2026, 3:11pm UTC](https://forum.ghost.org/t/third-party-single-sign-on-sso/3321/48 "2026-08-12T15:11:08Z")

</div>

> [@csgeek](#):
>
> @satonotdead authentik would be a very good viable option but that looks a bit hacky to say the least. I toyed with AI and got another iteration of it.

It is the top open-source option available right now to centralize and manage credentials in secure and private way, it would work out of the box if Ghost support OIDC/SAML common standard login systems.

Unfortunately it is not the case. We all are forced to their magic link and javascript tricks.

---

<div class="post-metadata">

**Author:** ![csgeek](https://avatars.discourse-cdn.com/v4/letter/c/9de053/32.png) [@csgeek](https://forum.ghost.org/u/csgeek)\
**Post date:** [August 16, 2026, 10:03pm UTC](https://forum.ghost.org/t/third-party-single-sign-on-sso/3321/49 "2026-08-16T22:03:38Z")

</div>

I have a working pattern for the /ghost/ admin panel at least. I really would be nice to support OIDC it’s really a pretty established pattern now. Any app not supporting it is really lagging behind.

Even a silly app like donetick that I’ve been using of late has OIDC support. The fact that a blogging pattern like ghost still isn’t supporting this is pretty sad.

It would be nice to know if it’s a matter of:

- Policy? We do not want to support this.
- Resources? We don’t have the cycles but accept well written PR?
- We have a plan! We’re not ready to let anyone else know yet but there is something in the works.

I wish we didn’t need to create ridiculous hacks to get basic auth functionality to work.

I haven’t had the time to write a fully fleshed out blog post on how I’m using this, but I’ll throw this out into the ether if anyone find value in it. My [ghost-proxy](https://github.com/csg33k/ghost-sso-proxy).

**Update:** Last update to ghost broke my ghost-proxy. So yet again, it would be really nice if ghost just supported a generic OIDC provider like every other app out there.

[Previous page](https://forum.ghost.org/t/third-party-single-sign-on-sso/3321.md?page=2)