Better SSO for services
Currently authenticating to services works in two ways:
- Authentication managed by authelia, service exposed without authentication (e.g. jackett, transmission, ...)
- Authentication managed by the service itself (e.g. nextcloud, nefarious, ...)
In order to ensure a uniform SSO experience, we have to make some changes at various levels.
Services for which we should use Remote-User
header from authelia:
-
transmission (linked to #17) -
nefarious -
grafana (not urgent, only admin) -
prometheus (not urgent, only admin) -
jackett (not urgent, only admin) -
jellyfin (currently using LDAP)
Other actions:
-
Nextcloud: Use OpenId Connect with authelia, once it's ready
Edited by Aurélien Bertron