oidc

Dear community, I have this issue while configuring SSO with Authentik and here are my configs: I have tried installed the Authentik self-signed CA into Proxmox but the problem still remains:

Hi, I logged in via open id connect and want to access the shell of my node. It asks me for the login but it seems that my username and password are wrong. If I log in as root user it does not ask me for login. How can I access the shell as the open id connect user? The user has all permissions...

Hey Folks, New to Proxmox and was trying to poke around the API. I stumbled on a openid path ("/api2/json/access/openid") which holds 'auth-url' and 'login' endpoints. Does anyone have experience in using these endpoints to get a API ticket? I currently have working OIDC setup with Google and...

I'm having issues configuring Hashicorp Vault as an OIDC realm provider for PVE. Once configured, I'm getting the following error when I try to login: OpenID redirect failed. Failed to parse server response (500) This is the realm configuration: openid: vault client-id <REDACTED>...

I am using OpenID Connect to use AD accounts to access to my Proxmox installation. I configured it using this tutorial. Works well :) At the moment, users login with their AD accounts and then I manually assign them membership to groups in Proxmox. I would like to use AD groups to grant...

Hello together, we're using a current Proxmox 7 Cluster in combination with OpenID Connect. During the last weeks the forced login using the parameter prompt=login got more and more annoying. Are there any plans/options to make this param optional so a potential session at the OIDC Provider...

Proxmox 7 has introduced OpenID-Connect authentication which enables us to go on the path of federated login. However for all the different Identity provider solutions the option will have to get ALOT more flexible. Options at the moment are soo limited they are constricting to a single IDP...

Hi, just upgraded one of our servers to PVE 7.0 without any major issues. Then wanted to enable the new OIDC SSO integration but ended up only with timeouts. We're running in a quite restricted corporate environment, all requests to the "outside" (including those to the corporate IDP) must...