<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Unable to change OIDC SSO to external provider]]></title><description><![CDATA[<p dir="auto">Hi all, getting stuck trying to change the OIDC to Microsoft, continues to revert to the Cloudron OpenID. Can be verified by even trying to disable the OIDC, upon reload it automatically re-enables the Cloudron OpenID.</p>
]]></description><link>https://forum.cloudron.io/topic/16030/unable-to-change-oidc-sso-to-external-provider</link><generator>RSS for Node</generator><lastBuildDate>Sat, 24 Oct 2026 16:51:51 GMT</lastBuildDate><atom:link href="https://forum.cloudron.io/topic/16030.rss" rel="self" type="application/rss+xml"/><pubDate>Tue, 29 Sep 2026 04:56:28 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Unable to change OIDC SSO to external provider on Tue, 29 Sep 2026 07:27:32 GMT]]></title><description><![CDATA[<p dir="auto">To continue what <a class="plugin-mentions-user plugin-mentions-a" href="/user/james" aria-label="Profile: james">@<bdi>james</bdi></a> said, to switch, you can create a backup, install a new app without SSO and then import app backup - <a href="https://docs.cloudron.io/backups/#import-app-backup" target="_blank" rel="noopener noreferrer nofollow ugc">https://docs.cloudron.io/backups/#import-app-backup</a> . Note that you have to investigate the situation of the existing SSO users after the import . Each app handles this differently and this is why it's not automated.</p>
]]></description><link>https://forum.cloudron.io/post/130158</link><guid isPermaLink="true">https://forum.cloudron.io/post/130158</guid><dc:creator><![CDATA[joseph]]></dc:creator><pubDate>Tue, 29 Sep 2026 07:27:32 GMT</pubDate></item><item><title><![CDATA[Reply to Unable to change OIDC SSO to external provider on Tue, 29 Sep 2026 07:14:50 GMT]]></title><description><![CDATA[<p dir="auto">Hello <a class="plugin-mentions-user plugin-mentions-a" href="/user/dylightful" aria-label="Profile: dylightful">@<bdi>dylightful</bdi></a><br />
This is working is designed.<br />
On app installation if you chose <code>Allow all users on this Cloudron</code> or <code>Only allow selected users</code>:</p>
<p dir="auto"><img src="/assets/uploads/files/1790665011591-9ecf8944-dc2e-4957-90e1-c4959cd24998-image.jpeg" alt="image.jpeg" class="img-markdown  img-fluid" width="509" height="443" /></p>
<p dir="auto">The app will always configure OIDC SSO for Cloudron on every app restart, including also disabling.</p>
<p dir="auto">Only when you chose <code>Leave user management to the app</code> to can manually change the OIDC settings of the app.</p>
<p dir="auto">Similar topic also explaining how to migrate from an SSO app to manual user managemend app: <a href="https://forum.cloudron.io/post/127352">https://forum.cloudron.io/post/127352</a></p>
]]></description><link>https://forum.cloudron.io/post/130155</link><guid isPermaLink="true">https://forum.cloudron.io/post/130155</guid><dc:creator><![CDATA[james]]></dc:creator><pubDate>Tue, 29 Sep 2026 07:14:50 GMT</pubDate></item></channel></rss>