Third party Single Sign On (SSO)

Ideas
48

It is the top open-source option available right now to centralize and manage credentials in secure and private way, it would work out of the box if Ghost support OIDC/SAML common standard login systems.

Unfortunately it is not the case. We all are forced to their magic link and javascript tricks.

49

I have a working pattern for the /ghost/ admin panel at least. I really would be nice to support OIDC itā€™s really a pretty established pattern now. Any app not supporting it is really lagging behind.

Even a silly app like donetick that Iā€™ve been using of late has OIDC support. The fact that a blogging pattern like ghost still isnā€™t supporting this is pretty sad.

It would be nice to know if itā€™s a matter of:

  • Policy? We do not want to support this.
  • Resources? We donā€™t have the cycles but accept well written PR?
  • We have a plan! Weā€™re not ready to let anyone else know yet but there is something in the works.

I wish we didnā€™t need to create ridiculous hacks to get basic auth functionality to work.

I havenā€™t had the time to write a fully fleshed out blog post on how Iā€™m using this, but Iā€™ll throw this out into the ether if anyone find value in it. My ghost-proxy.

Update: Last update to ghost broke my ghost-proxy. So yet again, it would be really nice if ghost just supported a generic OIDC provider like every other app out there.