Single Sign On (SSO) with subdomains using Caddy v2

• awesome-selfhosted

  765 177,191 9.1 Makefile

  A list of Free Software network services and web applications which can be hosted on your own servers

  

I've recently taken an interest in self-hosting simple open source applications — to have fun, take control of my privacy, and learn more about Linux, Docker and DevOps!

• caddy-auth-portal

  15 668 9.0 Go

  Discontinued Authentication Plugin for Caddy v2 implementing Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA with App Authenticators and Yubico.

I hope this post helps setting up your SSO with Caddy. I'd highly recommend trying it out if you find yourself always needing to authenticate with different services on your domain – and check out caddy-auth-portal's docs for even more advanced features!

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• caddy-authorize

  2 238 8.5 Go

  Discontinued Authorization Plugin for Caddy v2 (JWT/PASETO)

There's a caveat though: one of your subdomains/routes needs to be marked as primary yes (for reasons explained here), but the sso snippet we defined didn't have this. So, you'll need to copy and paste the config into one of your routes and add primary yes before you can just use import sso in the rest.

• Caddy

  401 53,568 9.4 Go

  Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

  

In Caddy v2, there's a pre-set order of precedence for directives. See this issue on GitHub for more details.

Suggest a related project