<![CDATA[OpenID Connect group restrictions?]]>Is there, or is there planned to be, a way to restrict an OpenID Connect provider to members of a certain group?

Specifically, we have a web site hosted outside of Cloudron, that it would be great to use our Cloudron accounts to control user access to. OpenID Connect (and other OAuth variants) are supported, so Cloudron just coming out with a Provider, is promising. But we want to restrict it to a particular group of users.

]]>https://forum.cloudron.io/topic/9402/openid-connect-group-restrictionsRSS for NodeFri, 11 Sep 2026 17:00:51 GMTTue, 13 Jun 2023 06:26:49 GMT60<![CDATA[Reply to OpenID Connect group restrictions? on Tue, 29 Apr 2025 23:01:39 GMT]]>I am also using app proxy,but my question is unrelated to that, nebulon has already noted the intended use Peter (and now I) meant.

]]>https://forum.cloudron.io/post/106420https://forum.cloudron.io/post/106420Tue, 29 Apr 2025 23:01:39 GMT<![CDATA[Reply to OpenID Connect group restrictions? on Mon, 28 Apr 2025 09:57:02 GMT]]>@nebulon ah, "web site hosted outside of Cloudron" . So this is for app proxy?

@krumel you are also using app proxy?

]]>https://forum.cloudron.io/post/106341https://forum.cloudron.io/post/106341Mon, 28 Apr 2025 09:57:02 GMT<![CDATA[Reply to OpenID Connect group restrictions? on Mon, 28 Apr 2025 09:47:48 GMT]]>I think the feature request is for the OpenID provider feature, so external apps can be setup to use the Cloudron. For this we have to implement a group/user access restriction in the OpenID external client settings.

]]>https://forum.cloudron.io/post/106340https://forum.cloudron.io/post/106340Mon, 28 Apr 2025 09:47:48 GMT<![CDATA[Reply to OpenID Connect group restrictions? on Mon, 28 Apr 2025 09:44:49 GMT]]>@krumel which app ? group restrictions (roles/permissions) are applied inside the app's configuration, so it really depends if the app supports this.

]]>https://forum.cloudron.io/post/106339https://forum.cloudron.io/post/106339Mon, 28 Apr 2025 09:44:49 GMT<![CDATA[Reply to OpenID Connect group restrictions? on Mon, 28 Apr 2025 06:24:30 GMT]]>Is there any update on this? The current system of allowing all users is a bit suboptimal.

]]>https://forum.cloudron.io/post/106320https://forum.cloudron.io/post/106320Mon, 28 Apr 2025 06:24:30 GMT<![CDATA[Reply to OpenID Connect group restrictions? on Tue, 13 Jun 2023 12:16:21 GMT]]>The oidc addon for apps already has group restriction support, however for external apps, this is not implemented. Technically it can be added so I will move this thread to feature requests section.

]]>https://forum.cloudron.io/post/68198https://forum.cloudron.io/post/68198Tue, 13 Jun 2023 12:16:21 GMT