This is the documentation of an pre-release opsi version. The documentation for the current version 4.3 can be found here.

Single Sign-On (SSO)

The Single Sign-On (SSO) extension for opsi allows you to authenticate users with a central identity provider. In this way, administrators can log in to opsi with their existing credentials. With SSO, you can use the existing user management of your identity provider and do not have to manage users in opsi separately. This simplifies the administration of users and increases security. User convenience and productivity are increased as they only have to log in once.

The SSO extension currently supports Microsoft Entra ID and Keycloak via the SAML 2.0 protocol.

To configure the SSO extension for opsi, please refer to authorization via SAML.

This module is a paid extension. This means that you need an activation file to unlock it. You will receive this file after you have purchased the extension. For evaluation purposes, we’re happy to provide you with a temporary license free of charge. Please contact us via email.