<![CDATA[Enable LDAP and Cloudron SSO After App is Installed]]>I skipped opting for SSO when installing apps. According to the Cloudron Docs in Users & Groups section you need to select SSO at the time of app installation.

Assuming an app support LDAP. Is it possible to add LDAP support (Cloudron SSO) to an app after it is installed?

]]>https://forum.cloudron.io/topic/7030/enable-ldap-and-cloudron-sso-after-app-is-installedRSS for NodeFri, 06 Mar 2026 00:18:29 GMTSat, 14 May 2022 01:54:39 GMT60<![CDATA[Reply to Enable LDAP and Cloudron SSO After App is Installed on Wed, 05 Apr 2023 06:51:43 GMT]]>@lukas Forgot to link to the docs - https://docs.cloudron.io/user-management/#openid-connect

]]>https://forum.cloudron.io/post/64380https://forum.cloudron.io/post/64380Wed, 05 Apr 2023 06:51:43 GMT<![CDATA[Reply to Enable LDAP and Cloudron SSO After App is Installed on Wed, 05 Apr 2023 06:52:48 GMT]]>@lukas With LDAP based sign on, automatic login is not possible (just not possible technically). In 7.4, we have made Cloudron an OIDC provider. You can create OIDC secrets from the dashboard and integrate it into apps yourself. OIDC supports automatic login.

The next step for us is to evaluate how good/bad the integration is across apps and integrate them into app packages (just like we do for LDAP). So far, we have evaluated a bunch of app and the results are promising! But there are also some quirks - for example, the nextcloud OIDC integration always prefixes the username. This means that your username on nextcloud is cloudron-lukas , for example. But in the long run, if OIDC works well, we will switch over completely. I expect this to take a good 3-4 months at the minimum.

]]>https://forum.cloudron.io/post/64379https://forum.cloudron.io/post/64379Wed, 05 Apr 2023 06:52:48 GMT<![CDATA[Reply to Enable LDAP and Cloudron SSO After App is Installed on Wed, 05 Apr 2023 06:01:15 GMT]]>@girish I hope I am in the right place with my question:

Is it possible for Cloudron users to automatically log in to the installed apps via SSO?

]]>https://forum.cloudron.io/post/64376https://forum.cloudron.io/post/64376Wed, 05 Apr 2023 06:01:15 GMT<![CDATA[Reply to Enable LDAP and Cloudron SSO After App is Installed on Sat, 14 May 2022 17:25:28 GMT]]>@nebulon said in Enable LDAP and Cloudron SSO After App is Installed:

Essentially there is no technical reason why the LDAP/SSO feature

There's many variation in app support:

  • What happens to existing users? I think it will be hard for us to write user migration docs for each app (because I have often seen one has to straight up edit the database).

  • Many apps do not support multiple auth providers. So, if you switch to LDAP or viceversa, you cannot login with your previous users anymore (to migrate data).

]]>https://forum.cloudron.io/post/47922https://forum.cloudron.io/post/47922Sat, 14 May 2022 17:25:28 GMT<![CDATA[Reply to Enable LDAP and Cloudron SSO After App is Installed on Sat, 14 May 2022 09:46:37 GMT]]>This has long been on our tasklist. Essentially there is no technical reason why the LDAP/SSO feature could not be enabled/disabled after installation. The main blocking point is that we are not really comfortable currently with how apps behave. Some might purge user-data if users go away which may result in dataloss.

]]>https://forum.cloudron.io/post/47897https://forum.cloudron.io/post/47897Sat, 14 May 2022 09:46:37 GMT<![CDATA[Reply to Enable LDAP and Cloudron SSO After App is Installed on Sat, 14 May 2022 04:46:33 GMT]]>@briankb-0 It's best to install a new app with SSO enabled and migrate the data.

]]>https://forum.cloudron.io/post/47891https://forum.cloudron.io/post/47891Sat, 14 May 2022 04:46:33 GMT