Hello,

I did a search and didn’t find anything mentioning Kerberos. Does OpenProject support Kerberos?

If it does, where can I find the documentation to set this up?

If not, what would it take to do this?

Regards,
Ron

Hey Ron,

OpenProject does not explicitly support Kerberos in any available plugin, but since we employ OmniAuth as an authentication bridge and there seems to be a Kerberos implementation for it,
you can easily expose this strategy as an OpenProject plugin.

We have a guide for writing OmniAuth plugins: https://www.openproject.org/open-source/development/create-omniauth-plugin/
As a starting point, you can have a look at my LDAP auth plugin for OmniAuth: https://github.com/oliverguenther/openproject-auth_ldap

Best,
Oliver

Hi Oliver,

What about SAML? It looks like there is OmniAuth-SAML on GitHub (https://github.com/omniauth/omniauth-saml).

Since OpenProject supports OmniAuth is this an easy drop-in?

Regards,
Ron

Hi Ron,

true - we do actively support SAML. Integrating that strategy should be nothing more than installing the following plugin:
https://github.com/finnlabs/openproject-auth_saml

Best,
Oliver