Post #967724

2026-04-01 01:55 UTC

@coopcloud we&#39;ve been researching self hosting platforms that are community run, and your approach looks like a very good fit with the grassroots communities we&#39;ve been nurturing. Wanted to get your take on where first class SSO support fits with your roadmap. From our exploring, it seems that best results are when the self hosting platform itself takes an opinionated approach to how to add SSO such that the same login can be used across all installed apps without fuss. We&#39;ve seen another project where ontop of the docker.yml file the projects add what would be something like a coopcloud.yml file that essentially overlays the docker.yml file with platform level config; which is pretty much where SSO config stuff sits. Would love to hear your thoughts on first-class SSO support as this is the major sticking point in our collective as to getting behind coopcloud vs alternatives. Maybe I&#39;m very wrong but I think this could help address the low quantity of 5/5 apps in the directory.. as this last step looks tricky/inconsistent currently. Amazing work btw, genuinely impressed and grateful for all the work u folks have already done. This is very much a good faith question to help us really step in. cc: @goblin

Replies (1)

@jadehopepunk@hachyderm.io 2026-04-03 07:18

@richiekhoo@hachyderm.io I think it depends what you mean by "first-class" support. @coopcloud@social.coop already has SSO support using apps like Rauthy. It exposes this to installed apps using environment variables so that they can use Rauthy as an/the oauth provider. Each app has a different extent to which it will support that, but some of the well maintained ones do quite a good job. What would "first class" mean. Would it mean that instead of any SSO app providing this capability there would be a built-in choice? I wouldn't want that, because I potentially need a different choice for neighbourhood-first approaches. Would it mean tighter integration into the apps? That would lead to forking other open source apps and would really cut down the ability to use them. I think the Co-op cloud approach could be tightened up a bit. SSO, is one of the cross cutting capabilities that one app can provide to other apps. The other two I'm aware of in CC are backup and email. I think those capabilities need to be formalised more, and I'd like to be able to add my own (eg, P2Panda connectivity). You should come help work on that :)

Open ##2430305