Fork me on GitHub Link Search Menu Expand Document Survey contribution
Help the team improve Authelia by taking this 10-second survey.

OIDC Integrations: Portainer

community/oidc-integrations/portainer.md

Note these setting have been tested with authelia v4.34.6 and Portainer (CE and EE) 2.12.2

Authelia config

The specific client config for portainer.

identity_providers:
  oidc:
    clients:
      - id: portainer_client_id
        description: Some description you want to shown on the Authelia consent page
        secret: some secret string which should also be entered in the portainer config
        public: false
        authorization_policy: two_factor
        audience: []
        scopes:
          - openid
          - profile
          - groups
          - email
        redirect_uris:
          - https://portainer.example.com
        userinfo_signing_algorithm: none

Portainer config

To setup Authelia as SSO provider in portainer go to Settings > Authentication and select Authentication method OAuth and Provider Custom and make sure automatic user provision is turned so users get automatically created.

Note make sure that Redirect URL matches exacty the redirect_uris in authelia config. Use preferred_username as the User identifier which makes sure the portianer user and authelia user have the same username. Scopes should be openid profile groups email do not use commas