This is a hugely requested feature for many years and a huge hole in my entire self hosted ecosystem. Every self-hosted app I have connects to my Authentik system for user management… Except home assistant. Arguably one of the apps I need it for the most for the whole family to use with their accounts.

Devs have been resistant for some reason.

There is now a community integratation that allows user management for HA to be via any openID backend (authentik, keycloak etc).

I’ve been running it for a few days and it works perfectly. Very easy to setup if you already have a working authentik setup and know how to use it with other apps like immich.

  • illusionist@lemmy.zip
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    1
    ·
    edit-2
    4 days ago

    I see you. There are spillover effects. If we don’t use and support passwords, others wont either.

    It’s not even that my government provides the identity but a foreign, autocratic, power hungry company for most people

    • boatswain@infosec.pub
      link
      fedilink
      English
      arrow-up
      3
      ·
      3 days ago

      With keycloak you can have a single local password to all your selfhosted apps: you sign in to keycloak, then you sso into everything else from there. I’m building that out on my homelab right now, and it’s working fine.

      • femtek@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 days ago

        Yeah, and there are other apps that do the same, I’m using voidauth myself but use keycloak at work for our internal sso