# Openid Connect SSO support

**URL:** https://hub.mender.io/t/openid-connect-sso-support/658
**Category:** General Discussions
**Tags:** sso, authentication
**Created:** [June 3, 2019, 8:52am UTC](https://hub.mender.io/t/openid-connect-sso-support/658 "2019-06-03T08:52:05Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![mteodor](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/mteodor/32/267_2.png) [@mteodor](https://hub.mender.io/u/mteodor)
#### Post date: [June 3, 2019, 8:52am UTC](https://hub.mender.io/t/openid-connect-sso-support/658/1 "2019-06-03T08:52:05Z")

</div>

Hi is there a plan to support some way of SSO authentication in mender?  
I’ve made some solution using kong-oidc with some changes in mender gui and useradm.  
Are you interested to discuss?

---

<div class="post-metadata">

### Author: ![mirzak](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/mirzak/32/2056_2.png) [@mirzak](https://hub.mender.io/u/mirzak)
#### Post date: [June 3, 2019, 9:44am UTC](https://hub.mender.io/t/openid-connect-sso-support/658/2 "2019-06-03T09:44:45Z")

</div>

Hi @mteodor, As far as I know there are no short term plans to support SSO. This is something that was considered early on in the project but a different approach was taken and currently priorities lay elsewhere.

---

<div class="post-metadata">

### Author: ![mteodor](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/mteodor/32/267_2.png) [@mteodor](https://hub.mender.io/u/mteodor)
#### Post date: [June 15, 2019, 2:59pm UTC](https://hub.mender.io/t/openid-connect-sso-support/658/3 "2019-06-15T14:59:59Z")

</div>

as I said I’ve implemented SSO for mender using kong and keycloak  
now what puzzles me how can you restrict user from not deleting other users ?  
I dont see any roles or permissions

---

<div class="post-metadata">

### Author: ![genedupre](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/genedupre/32/289_2.png) [@genedupre](https://hub.mender.io/u/genedupre)
#### Post date: [July 30, 2019, 8:57am UTC](https://hub.mender.io/t/openid-connect-sso-support/658/4 "2019-07-30T08:57:44Z")

</div>

hello @mteodor,  
would you like to explain how you did this? i’m myself in the progress trying to implement a Keycloak solution into mender, explaining how you did it would be of great help!  
I also think allot of other people would be interested into this  
Greets Gene

---

<div class="post-metadata">

### Author: ![uttaravadina](https://avatars.discourse-cdn.com/v4/letter/u/e99b99/32.png) [@uttaravadina](https://hub.mender.io/u/uttaravadina)
#### Post date: [December 18, 2019, 7:12am UTC](https://hub.mender.io/t/openid-connect-sso-support/658/5 "2019-12-18T07:12:23Z")

</div>

@mirzak @mteodor raises a good point here. It will be greatly beneficial if an Access Control List can be assigned and with it Roles and Permissions. Do you have any plans to integrate this in near future?

---

<div class="post-metadata">

### Author: ![mokul](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/mokul/32/1286_2.png) [@mokul](https://hub.mender.io/u/mokul)
#### Post date: [July 6, 2021, 7:19pm UTC](https://hub.mender.io/t/openid-connect-sso-support/658/6 "2021-07-06T19:19:42Z")

</div>

@mteodor could you please share how you did this, I am also looking to do similar stuff.  
your help is very much appreciated.
