Disable local login

[nicedevil007]

Heya, I just enabled OpenIDConnect with authentik and now I linked my existing accounts to my authentik account.
Is is possible to deactivate the local login that doesn't have 2FA f.e. and only allow the authentication via authentik?

[vabene1111]

You can disable registration but not login at the moment

[nicedevil007]

sure, for myself the linking of existing accounts with OIDC accounts is not working, registering new ones is working well

right now I'm running tandoor in a LXC container and not in docker anymore. there is a *.env file that got 3 lines added:

SOCIAL_PROVIDERS=allauth.socialaccount.providers.openid_connect
SOCIALACCOUNT_PROVIDERS={"openid_connect":{"APPS":[{"provider_id":"authentik","name":"Authentik","client_id":"<your client ID>","secret":"<your secret>","settings":{"server_url":"https://<AUTHENIK URL>/application/o/tandoor/.well-known/openid-configuration"}}]}}

[nicedevil007]

hey @vabene1111

since 2023 there is some time gone. now I was able to setup OIDC on my paperless instance and paperless is working with django as well. so I guess the implementation of the option is close the same to your tandoor?

PAPERLESS_DISABLE_REGULAR_LOGIN=true

https://docs.paperless-ngx.com/configuration/#PAPERLESS_DISABLE_REGULAR_LOGIN

[BobWs]

Thank for sharing! If I may ask which SSO are you using? Authentik, Authelia or Keycloak?
I tried Keycloak but it didn't work for me, I coudn't get it to work on my Synology with Nginx-Proxy-Manager...even after reading and watching a lot of tutorials:-(

I will give Authentik I try...I also started using Paperless-ngx recently, so it good to hear you have managed to get it to work with SSO/2FA I was looking for that also;-)
Thanks again!

[nicedevil007]

Give authentik a try, works like a charm for most things on my end :)

[HugoFollic]

Definitely a great feature that I would like to have. Is it complicated to implement it ?