[![Stargazers][stars-shield]][stars-url] [![Issues][issues-shield]][issues-url] [![Contributors][contributors-shield]][contributors-url] [![Forks][forks-shield]][forks-url] [![MIT License][license-shield]][license-url]

OpenID Connect for Home Assistant

OpenID Connect (OIDC) implementation for Home Assistant through a custom component/integration

Usage Guide · Configuration Guide · Contribution Guide

Announcements & Polls · Issues · Questions · Feature Requests

> [!CAUTION] > This is an alpha release. I give no guarantees about code quality, error handling or security at this stage. Use at your own risk. Provides an OpenID Connect (OIDC) implementation for Home Assistant through a custom component/integration. Through this integration, you can create an SSO (single-sign-on) environment within your self-hosted application stack / homelab. ### Background If you would like to read the background/open letter that lead to this component, you can find the original post at https://community.home-assistant.io/t/open-letter-for-improving-home-assistants-authentication-system-oidc-sso/494223. It is currently one of the most upvoted feature requests for Home Assistant. > [!TIP] > If you support the addition of this feature to the Home Assistant core, please upvote https://github.com/orgs/home-assistant/discussions/48. It's the successor of the Home Assistant Community post mentioned above (with almost 900 upvotes). ## Installation guide 1. Add this repository to [HACS](https://hacs.xyz/). [![Open your Home Assistant instance and open a repository inside the Home Assistant Community Store.](https://my.home-assistant.io/badges/hacs_repository.svg)](https://my.home-assistant.io/redirect/hacs_repository/?owner=christiaangoossens&repository=hass-oidc-auth&category=Integration) 2. Add the YAML configuration that matches your OIDC provider to `configuration.yaml`. See the [Configuration Guide](./docs/configuration.md) for more details or pick your OIDC provider below: |

| |:-----------------------------------------------------------------------------------------:|:-------------------------------------------------------------------------------------:|:---------------------------------------------------------------------------------------:| | [Authentik](./docs/provider-configurations/authentik.md) | [Authelia](./docs/provider-configurations/authelia.md) | [Pocket ID](./docs/provider-configurations/pocket-id.md) | By default, the integration assumes you configure Home Assistant as a **public client** and thus only specify the `client_id` and no `client_secret`. For example, your configuration might look like: ```yaml auth_oidc: client_id: "example" discovery_url: "https://example.com/.well-known/openid-configuration" ``` When registering Home Assistant at your OIDC provider, use `/auth/oidc/callback` as the callback URL and select 'public client'. You should now get the `client_id` and `issuer_url` or `discovery_url` to fill in. 3. Restart Home Assistant 4. Login through the OIDC Welcome URL at `/auth/oidc/welcome`. You will have to go there manually for now. For example, it might be located at http://homeassistant.local:8123/auth/oidc/welcome. More (detailed) usage instructions can be found in the [Usage Guide](./docs/usage.md). ## Contributions Contibutions are very welcome! If you program in Python or have worked with Home Assistant integrations before, please try to contribute. A list of requested contributions/future goals is in the [Contribution Guide](./CONTRIBUTING.md). Please see the [Contribution Guide](./CONTRIBUTING.md) for more information. ### Found a security issue? Please see [SECURITY.md](./SECURITY.md) for more information on how to submit your security issue securely. You can find previously found vulnerablities and their corresponding security advisories at the [Security Advisories page](https://github.com/christiaangoossens/hass-oidc-auth/security/advisories). ## License Distributed under the MIT license with no warranty. You are fully liable for configuring this integration correctly to keep your Home Assistant installation secure. Use at your own risk. The full license can be found in [LICENSE.md](./LICENSE.md) [contributors-shield]: https://img.shields.io/github/contributors/christiaangoossens/hass-oidc-auth.svg?style=for-the-badge [contributors-url]: https://github.com/christiaangoossens/hass-oidc-auth/graphs/contributors [forks-shield]: https://img.shields.io/github/forks/christiaangoossens/hass-oidc-auth.svg?style=for-the-badge [forks-url]: https://github.com/christiaangoossens/hass-oidc-auth/network/members [stars-shield]: https://img.shields.io/github/stars/christiaangoossens/hass-oidc-auth.svg?style=for-the-badge [stars-url]: https://github.com/christiaangoossens/hass-oidc-auth/stargazers [issues-shield]: https://img.shields.io/github/issues/christiaangoossens/hass-oidc-auth.svg?style=for-the-badge [issues-url]: https://github.com/christiaangoossens/hass-oidc-auth/issues [license-shield]: https://img.shields.io/github/license/christiaangoossens/hass-oidc-auth.svg?style=for-the-badge [license-url]: https://github.com/christiaangoossens/hass-oidc-auth/blob/master/LICENSE.txt