Independent directory, made by the developer of Vulpo. Not affiliated with Home Assistant or the Open Home Foundation.

Screenshots From the README of christiaangoossens/hass-oidc-auth.

UI Configuration GIF

About

OpenID Connect/SSO Authentication is an integration that adds an OpenID Connect login provider to Home Assistant. It acts as a client (relying party), so Home Assistant can sign users in through an external identity provider for single sign-on in a self-hosted setup. It follows the OpenID Connect, OAuth2, JWT and PKCE specifications, and it patches as little of the core Home Assistant code as possible. Setup in the UI asks for the provider, its discovery URL, a client ID and an optional client secret. It can assign admin and user roles from group names, link existing users automatically, and block creation of new Home Assistant users. Some advanced features are only available through YAML configuration, and it works locally.

Automatic summary of the README and code of christiaangoossens/hass-oidc-auth. Something wrong, or are you the maintainer and want your own text here? Get in touch

Supports

  • Works locally Talks to your devices on your own network. No vendor cloud in between.

  • From the Marketplace Installed through the Marketplace, formerly HACS.

  • Actively maintained Its author released or pushed a change in the last six months.

Setting it up

Install it from the Marketplace and restart Home Assistant, then add it under Settings, Devices and services.

Choose OIDC Provider

  • Provider

Provider Configuration

  • Discovery URL

Connection Validation

  • Choose an action

Client Configuration

  • Client ID
  • Client Secret (optional; required by some providers)

Groups & Role Configuration

  • Enable group-based role assignment
  • Admin group name
  • User group name (optional)

User Linking Options

  • Enable automatic user linking (⚠️ Security Risk)
  • Prevent creation of new Home Assistant users

Reconfigure OIDC Authentication

  • Client ID
  • Client Secret (leave empty to keep current)

After setup

  • Enable automatic user linking (⚠️ Security Risk)
  • Prevent creation of new Home Assistant users
  • Enable group-based role assignment
  • Admin group name
  • User group name (optional - leave empty to allow all authenticated users)

Texts from the code of christiaangoossens/hass-oidc-auth.

Information

Installs
1.4k sharing analytics
GitHub stars
1.1k
Connection
Works locally
Upkeep
Updated in the last 6 months
Version
v1.2.1,
Kind
Marketplace integration
Needs
Needs the Marketplace (HACS on 2026.10 and older)
Domain
auth_oidc

You might also like

Independent directory, made by the developer of Vulpo. Not affiliated with Home Assistant or the Open Home Foundation. About these numbers