16_OpenID-Connect.md 1.4 KB

OpenID Connect (OIDC)

See: What is OpenID Connect?.

This is one of the access control methods supported by FreshRSS.

OIDC support is provided by mod_auth_openidc. Additional documentation can be found in that project.

Using Docker

OIDC support in Docker is activated by the presence of a non-empty non-zero OIDC_ENABLED environment variable.

ℹ️ Only available in our Debian image.

The config is done with these environment variables

  • OIDC_ENABLED: Activates OIDC support.
  • OIDC_PROVIDER_METADATA_URL: The config URL. Usually looks like: <issuer>/.well-known/openid-configuration
  • OIDC_CLIENT_ID: The OIDC client id from your issuer.
  • OIDC_CLIENT_SECRET: The OIDC client secret issuer.
  • OIDC_CLIENT_CRYPTO_KEY: An opaque key used for internal encryption.

You may add additional custom configuration in a new ./FreshRSS/p/i/.htaccess file.

Using own Apache installation

See our reference Apache configuration for more information.

Setup

After being properly configured, OIDC support can be activated in FreshRSS.

During a new FreshRSS install, the HTTP Authentication Method must be picked.

After install, the method can be changed in Administration > Authentication.