<![CDATA[Grist 1.2.6 removing SSO via OIDC/SAML]]>"Update on OIDC/SAML support

As of this release, Grist Labs will no longer be officially supporting SSO via OIDC/SAML outside of the full edition of Grist. If you're already running OIDC or SAML on a self-hosted Grist installation configured before this change, it should continue to work. If you're relying on OIDC/SAML in production, absolutely reach out to us, we want full Grist to work for your organization."

Hello team,

One of our Cloudron instances is using Grist without the Full Edition license (since the organization doesn't qualify). Grist found a niche as part of a few business processes where we needed a few users from different departments to be able to login and check the progress on some n8n workflows. Historically we had used n8n's data tables but they were severely limited and not intuitive - which is where the self hosted Grist-core with Custom Widgets became very useful.

The question is whether or not we should be installing this update since our Grist instance is used in production and is part of our workflows (albeit, nothing insane) and our Cloudron users have been using SSO. And before anyone suggests it we're not going to just apply a full edition license and violate the terms.

@James

]]>https://forum.cloudron.io/topic/15880/grist-1.2.6-removing-sso-via-oidc-samlRSS for NodeMon, 21 Sep 2026 09:17:24 GMTMon, 31 Aug 2026 00:52:48 GMT60<![CDATA[Reply to Grist 1.2.6 removing SSO via OIDC/SAML on Thu, 17 Sep 2026 13:45:52 GMT]]>https://github.com/robchahin/sso-wall-of-shame/issues/738

]]>https://forum.cloudron.io/post/129600https://forum.cloudron.io/post/129600Thu, 17 Sep 2026 13:45:52 GMT<![CDATA[Reply to Grist 1.2.6 removing SSO via OIDC/SAML on Thu, 17 Sep 2026 07:43:22 GMT]]>Hello @umnz

@umnz said:

Something weird with the code block in docs - it's: export GRIST_DEFAULT_EMAIL=admin@email.com

Thanks for pointing this out, fixing it.

@umnz said:

Honestly, a completely enshittified experience. Anyone reading this.. don't bother with this app if you're starting out, it's only going to get worse.

That is honest feedback, but directed towards @grist and not Cloudron.
Unfortnuatly we have no control over what upstream apps decide.
But that is also the reason why we started publishing more of our own apps like Cubby, Contacts, Mail and so on.

]]>https://forum.cloudron.io/post/129572https://forum.cloudron.io/post/129572Thu, 17 Sep 2026 07:43:22 GMT<![CDATA[Reply to Grist 1.2.6 removing SSO via OIDC/SAML on Thu, 17 Sep 2026 02:21:35 GMT]]>

So if I where in your position I would see to migrating the SSO users to normal users.
If I remember correctly I did test that some time ago.
When SSO users exist and try to login and there is no SSO support it shows a migration message for that user.

image.jpeg

We don't get the option to add a user manually it seems. When I try to "add user" in the top right profile menu, I get a redirect as the same user. I can't seem to create new users that way.

When I try to invite to a document using the link, I get the Cloudron login page (if I'm using incognito, otherwise it just logs me in as me automatically).

image.jpeg

Honestly, a completely enshittified experience. Anyone reading this.. don't bother with this app if you're starting out, it's only going to get worse.

]]>https://forum.cloudron.io/post/129571https://forum.cloudron.io/post/129571Thu, 17 Sep 2026 02:21:35 GMT<![CDATA[Reply to Grist 1.2.6 removing SSO via OIDC/SAML on Thu, 17 Sep 2026 02:10:14 GMT]]>image.jpeg

Something weird with the code block in docs - it's: export GRIST_DEFAULT_EMAIL=admin@email.com

]]>https://forum.cloudron.io/post/129570https://forum.cloudron.io/post/129570Thu, 17 Sep 2026 02:10:14 GMT<![CDATA[Reply to Grist 1.2.6 removing SSO via OIDC/SAML on Thu, 17 Sep 2026 02:05:42 GMT]]>Nevermind - needed to check the docs:
https://docs.cloudron.io/packages/grist/

]]>https://forum.cloudron.io/post/129569https://forum.cloudron.io/post/129569Thu, 17 Sep 2026 02:05:42 GMT<![CDATA[Reply to Grist 1.2.6 removing SSO via OIDC/SAML on Thu, 17 Sep 2026 02:04:45 GMT]]>Existing installation upgraded without much issues but new installations are not working as expected. A fresh Grist installation doesn't include any onboarding or administrator account so you can't configure anything.

]]>https://forum.cloudron.io/post/129568https://forum.cloudron.io/post/129568Thu, 17 Sep 2026 02:04:45 GMT<![CDATA[Reply to Grist 1.2.6 removing SSO via OIDC/SAML on Mon, 31 Aug 2026 17:09:33 GMT]]>We learned a while back not to allow auto updates, hence checking release notes before each update.

I won't be able to do any testing until later this week unfortunately. If we have to, we'll migrate to normal users and then we'll likely look at moving to nocodb or similar. Can't be supporting enshittification.

]]>https://forum.cloudron.io/post/128759https://forum.cloudron.io/post/128759Mon, 31 Aug 2026 17:09:33 GMT<![CDATA[Reply to Grist 1.2.6 removing SSO via OIDC/SAML on Mon, 31 Aug 2026 07:27:44 GMT]]>Hello @umnz
I would disable automatic updates for your production grist until this is resolved.
Create a clone of the production grist and update the clone and validate the clone if everything is working.
After that you should have a good idea of what to expect.

Since they state:

As of this release, Grist Labs will no longer be officially supporting SSO via OIDC/SAML outside of the full edition of Grist. If you're already running OIDC or SAML on a self-hosted Grist installation configured before this change, it should continue to work. If you're relying on OIDC/SAML in production, absolutely reach out to us, we want full Grist to work for your organization.

The important part being:

If you're already running OIDC or SAML on a self-hosted Grist installation configured before this change, it should continue to work.

Should is the key word here.
Meaning they can go break that (deliberately or not) in the future and just shrug it of with stating:

Grist Labs no longer be officially supporting SSO via OIDC/SAML outside of the full edition of Grist

So if I where in your position I would see to migrating the SSO users to normal users.
If I remember correctly I did test that some time ago.
When SSO users exist and try to login and there is no SSO support it shows a migration message for that user.

But please test that with a cloned version and report what you find for everyone else.

]]>https://forum.cloudron.io/post/128722https://forum.cloudron.io/post/128722Mon, 31 Aug 2026 07:27:44 GMT