SELF-HOSTED · OPEN SOURCE · OIDC

Self-hosted applications with free OIDC login

A catalog of applications that support OIDC without a paid SSO add-on.

Skip the SSO surcharge

21 applications

Built-in Extension required

Business intelligence

Application OIDC support License Description Links
Apache Superset Apache-2.0 An open-source data exploration and dashboarding platform that supports OAuth2/OIDC providers through Flask AppBuilder authentication configuration. Documentation

Community forum

Application OIDC support License Description Links
Discourse GPL-2.0-only A self-hosted discussion platform with OpenID Connect authentication; the official OIDC plugin is now bundled into Discourse core. Documentation

Container registry

Application OIDC support License Description Links
Harbor Apache-2.0 An open-source OCI container registry with OIDC authentication, configurable claims, and optional OIDC group-based permissions. Documentation

Document management

Application OIDC support License Description Links
Paperless-ngx GPL-3.0-only A self-hosted document management system that supports generic OpenID Connect providers through its django-allauth integration. Documentation

Documentation / wiki

Application OIDC support License Description Links
BookStack MIT A self-hosted documentation and wiki platform with built-in OpenID Connect authentication, user matching, and optional group sync. Documentation
Outline BSL-1.1 A self-hosted collaborative knowledge base with an OIDC authentication plugin. OIDC is available without an SSO add-on, but the current BSL license has restrictions and is not an open-source license. Documentation

File sync / collaboration

Application OIDC support License Description Links
Nextcloud AGPL-3.0 A self-hosted collaboration suite that can use the maintained user_oidc app as an OpenID Connect user backend. Documentation

Git hosting / DevOps

Application OIDC support License Description Links
Argo CD Apache-2.0 A declarative Kubernetes continuous-delivery tool with free self-hosted SSO through a direct OIDC provider or its bundled Dex integration. Documentation
Forgejo GPL-3.0-only A community-driven self-hosted Git forge with external authentication support for OIDC-compatible providers. Documentation
Gitea MIT A lightweight self-hosted Git service that can authenticate users through OAuth2/OIDC providers, including generic providers. Documentation
GitLab Self-Managed MIT (Community Edition) / GitLab Enterprise Edition license A self-hosted DevOps platform with OpenID Connect OmniAuth login available in the Free self-managed tier; advanced OIDC group-based administration requires higher tiers. Documentation

Helpdesk / customer support

Application OIDC support License Description Links
Zammad AGPL-3.0-only An open-source, self-hosted helpdesk platform with built-in OpenID Connect authentication; its free AGPL edition does not require an SSO add-on. Documentation

Messaging / federation

Application OIDC support License Description Links
Matrix Synapse AGPL-3.0 The Matrix homeserver supports authenticating users against one or more OpenID Connect providers instead of, or alongside, local passwords. Documentation

Multi-user notebooks

Application OIDC support License Description Links
JupyterHub BSD-3-Clause A multi-user Jupyter server that can authenticate with generic OIDC providers using the open-source OAuthenticator package. Documentation

Observability / dashboards

Application OIDC support License Description Links
Grafana OSS AGPL-3.0-only The open-source Grafana distribution supports OIDC-compatible providers through Generic OAuth; some provisioning and enterprise capabilities are separate features. Documentation

Photo and video management

Application OIDC support License Description Links
Immich AGPL-3.0-only A self-hosted photo and video backup application with built-in OIDC authentication for external identity providers. Documentation

Project management

Application OIDC support License Description Links
Windshift AGPL-3.0 An open-source, self-hosted project management and Jira alternative with OIDC SSO, unlimited users, and unlimited workspaces in its free edition. Documentation

Remote desktop gateway

Application OIDC support License Description Links
Apache Guacamole Apache-2.0 A clientless remote desktop gateway whose OpenID Connect authentication extension delegates web login to an OIDC provider. Documentation

Search / analytics

Application OIDC support License Description Links
OpenSearch Dashboards Apache-2.0 An open-source search and analytics interface that supports OpenID Connect authentication through the OpenSearch Security plugin. Documentation

Task management

Application OIDC support License Description Links
Vikunja AGPL-3.0 A self-hosted task and project management application with configurable OpenID Connect authentication, account linking, and group mapping. Documentation

Team chat

Application OIDC support License Description Links
Zulip Apache-2.0 An open-source team chat platform with self-hosted support for generic OpenID Connect authentication and optional group synchronization. Documentation