[Feature request] SSO authentication with OIDC

[Steeven9]

First of all, this is a fantastic project!

To simplify user registration, authorization, and login, I was wondering if it would possible to allow using an external identity provider (e.g. Keycloak or Google).

I think OAuth/OIDC is the most widely used, which would allow administrators to plug in their own authentication system to manage users.

[hunvreus]

It's on the roadmap, yes.

In the meantime, you can enable Google login and add an allowrule (in the admin panel) to only allow email addresses from your domain.

[pozylon]

found this project and i find it exceptionally well written, i'd love to incorporate it in my stack... currently have this problem here:

"No self-hosted PaaS currently has native support for all three: Forgejo as a git source & actions triggered review deployments + Keycloak OIDC login"

i think if dev push had OIDC it would unlock a lot of people in the self-hosted community.