this post was submitted on 17 Mar 2026
115 points (97.5% liked)

Selfhosted

60934 readers
502 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world
115
Single Sign in for Home Assistant now possible with OpenID (github.com)
submitted 4 months ago by Lem453@lemmy.ca to c/selfhosted@lemmy.world
19 comments fedilink hide all child comments
 

This is a hugely requested feature for many years and a huge hole in my entire self hosted ecosystem. Every self-hosted app I have connects to my Authentik system for user management... Except home assistant. Arguably one of the apps I need it for the most for the whole family to use with their accounts.

Devs have been resistant for some reason.

There is now a community integratation that allows user management for HA to be via any openID backend (authentik, keycloak etc).

I've been running it for a few days and it works perfectly. Very easy to setup if you already have a working authentik setup and know how to use it with other apps like immich.

you are viewing a single comment's thread
view the rest of the comments
[–] illusionist@lemmy.zip 10 points 4 months ago (1 children)

I would hate it if google and apple would be the sole identity providers. If they lock me out, I'm lost. That's what a majority of people do. And services have the power to choose the identity provider. Most offer only that and that's horrible.

[–] Flipper@feddit.org 5 points 4 months ago (1 children)

I should have been more clear.

I meant for self hosting.

Though realistically, even if the service is provided for the public, you could just use an instance of keycloak or something similar with open registration. That's what an association I'm close to is doing already.

[–] illusionist@lemmy.zip 4 points 4 months ago* (last edited 4 months ago) (1 children)

I see you. There are spillover effects. If we don't use and support passwords, others wont either.

It's not even that my government provides the identity but a foreign, autocratic, power hungry company for most people

[–] boatswain@infosec.pub 3 points 4 months ago (1 children)

With keycloak you can have a single local password to all your selfhosted apps: you sign in to keycloak, then you sso into everything else from there. I'm building that out on my homelab right now, and it's working fine.

[–] femtek@lemmy.blahaj.zone 2 points 4 months ago

Yeah, and there are other apps that do the same, I'm using voidauth myself but use keycloak at work for our internal sso