starred/Radarr

Fork 0

mirror of https://github.com/Radarr/Radarr.git synced 2026-03-02 22:57:34 -05:00

LDAP and SSO Support #6368

New issue

Open

opened 2026-02-19 23:03:55 -05:00 by deekerman · 16 comments

deekerman commented

2026-02-19 23:03:55 -05:00

Owner

Originally created by @ashvinnihalani on GitHub (Feb 19, 2022).

Is there an existing issue for this?

I have searched the existing issues

Lack of multiuser support

Describe the solution you'd like

Support for LDAP/SSO authentication. This provided many benefits:

Multiple user accounts without password sharing
Don't store admin credentials in plaintext config
Use same credentials/sessions across apps in this space ( i.e Radarr, NZBGet, Tautulli, etc)
Opens the door for user permissions (authorization) down the road
Improve security by offloading AuthN/AuthZ to services designed for these purposes

Describe alternatives you've considered

No real alternatives are other than using a different project. Keeping a proxy in front of the solution fails in certain use cases

Anything else?

There has been an issue opened in the past https://github.com/Radarr/Radarr/issues/2680 but it was closed due to lack of manpower. I am happy to help contribute/lead the development of this feature if it is not a high priority. .NET is not my strongest language so some pointers to where the relevant files to base off/refer to are located

AB#2609

Originally created by @ashvinnihalani on GitHub (Feb 19, 2022). ### Is there an existing issue for this? - [X] I have searched the existing issues ### Is your feature request related to a problem? Please describe Lack of multiuser support ### Describe the solution you'd like Support for LDAP/SSO authentication. This provided many benefits: - Multiple user accounts without password sharing - Don't store admin credentials in plaintext config - Use same credentials/sessions across apps in this space ( i.e Radarr, NZBGet, Tautulli, etc) - Opens the door for user permissions (authorization) down the road - Improve security by offloading AuthN/AuthZ to services designed for these purposes ### Describe alternatives you've considered No real alternatives are other than using a different project. Keeping a proxy in front of the solution fails in certain use cases ### Anything else? There has been an issue opened in the past https://github.com/Radarr/Radarr/issues/2680 but it was closed due to lack of manpower. I am happy to help contribute/lead the development of this feature if it is not a high priority. .NET is not my strongest language so some pointers to where the relevant files to base off/refer to are located [AB#2609](https://dev.azure.com/Servarr/7ab38f4e-5a57-4d70-84f4-94dd9bc5d6df/_workitems/edit/2609)

deekerman added the

Type: Feature Request

Status: Maybe One Day

labels

2026-02-19 23:03:55 -05:00

deekerman commented

2026-02-19 23:03:55 -05:00

Author

Owner

@ta264 commented on GitHub (Feb 20, 2022):

For the record, passwords are not stored in plaintext.

@ta264 commented on GitHub (Feb 20, 2022): For the record, passwords are not stored in plaintext.

deekerman commented

2026-02-19 23:03:55 -05:00

Author

Owner

@aetaric commented on GitHub (Aug 28, 2023):

With radarr 5.x requiring authentication (8911386), it might be time to revisit this. A non-zero number of people have authentication off in radarr since auth is offloaded to something else like apache2's mod_auth_mellon for SAML and authnz_ldap for LDAP.

@aetaric commented on GitHub (Aug 28, 2023): With radarr 5.x requiring authentication (8911386), it might be time to revisit this. A non-zero number of people have authentication off in radarr since auth is offloaded to something else like apache2's mod_auth_mellon for SAML and authnz_ldap for LDAP.

deekerman commented

2026-02-19 23:03:55 -05:00

Author

Owner

@bakerboy448 commented on GitHub (Aug 28, 2023):

A non-zero number of people have authentication off in radarr since auth is offloaded to something else like apache2's mod_auth_mellon for SAML and authnz_ldap for LDAP.

it's a non-issue and External auth is supported https://wiki.servarr.com/radarr/faq#forced-authentication

@bakerboy448 commented on GitHub (Aug 28, 2023): >A non-zero number of people have authentication off in radarr since auth is offloaded to something else like apache2's mod_auth_mellon for SAML and authnz_ldap for LDAP. it's a non-issue and External auth is supported https://wiki.servarr.com/radarr/faq#forced-authentication

deekerman commented

2026-02-19 23:03:56 -05:00

Author

Owner

@RobinDadswell commented on GitHub (Aug 28, 2023):

With radarr 5.x requiring authentication (8911386), it might be time to revisit this. A non-zero number of people have authentication off in radarr since auth is offloaded to something else like apache2's mod_auth_mellon for SAML and authnz_ldap for LDAP.

We are currently investigating Plex auth and OIDC for extension of the current auth methods in the future, although there are some kinks to work out.

@RobinDadswell commented on GitHub (Aug 28, 2023): > With radarr 5.x requiring authentication (8911386), it might be time to revisit this. A non-zero number of people have authentication off in radarr since auth is offloaded to something else like apache2's mod_auth_mellon for SAML and authnz_ldap for LDAP. We are currently investigating Plex auth and OIDC for extension of the current auth methods in the future, although there are some kinks to work out.

deekerman commented

2026-02-19 23:03:56 -05:00

Author

Owner

@Robin-Sch commented on GitHub (Jan 12, 2024):

Is there any update for this?

@Robin-Sch commented on GitHub (Jan 12, 2024): Is there any update for this?

deekerman commented

2026-02-19 23:03:56 -05:00

Author

Owner

@RobinDadswell commented on GitHub (Jan 12, 2024):

Is there any update for this?

Currently no update on this, have been having some issues with OIDC in the limited testing that's been done and trying to work through those kinks before we make this more widely available

@RobinDadswell commented on GitHub (Jan 12, 2024): > Is there any update for this? Currently no update on this, have been having some issues with OIDC in the limited testing that's been done and trying to work through those kinks before we make this more widely available

deekerman commented

2026-02-19 23:03:56 -05:00

Author

Owner

@digitaljdr commented on GitHub (Jul 4, 2024):

Any update on OIDC? :) just stood up authentik and want to sso all the apps

@digitaljdr commented on GitHub (Jul 4, 2024): Any update on OIDC? :) just stood up authentik and want to sso all the apps

deekerman commented

2026-02-19 23:03:56 -05:00

Author

Owner

@bakerboy448 commented on GitHub (Jul 4, 2024):

When there is an update there will be a commit or PR tied to this issue.

Asking for an update does not make this appear any sooner

there are effectively no active developers for the Servarr Starrs and no one from the community is interested in helping.

@bakerboy448 commented on GitHub (Jul 4, 2024): When there is an update there will be a commit or PR tied to this issue. Asking for an update does not make this appear any sooner there are effectively no active developers for the Servarr Starrs and no one from the community is interested in helping.

deekerman commented

2026-02-19 23:03:56 -05:00

Author

Owner

@alexsalex commented on GitHub (Jul 23, 2024):

Any update on OIDC?

@alexsalex commented on GitHub (Jul 23, 2024): Any update on OIDC?

deekerman commented

2026-02-19 23:03:56 -05:00

Author

Owner

@Robin-Sch commented on GitHub (Jul 23, 2024):

When there is an update there will be a commit or PR tied to this issue.

Asking for an update does not make this appear any sooner

there are effectively no active developers for the Servarr Starrs and no one from the community is interested in helping.

Only thing you can do right now is disable authentication and then use something like oauth-proxy in front of your arr services.

@Robin-Sch commented on GitHub (Jul 23, 2024): > When there is an update there will be a commit or PR tied to this issue. > > Asking for an update does not make this appear any sooner > > there are effectively no active developers for the Servarr Starrs and no one from the community is interested in helping. Only thing you can do right now is disable authentication and then use something like oauth-proxy in front of your arr services.

deekerman commented

2026-02-19 23:03:56 -05:00

Author

Owner

@Dkhil commented on GitHub (Sep 1, 2024):

Any update on OIDC?

@Dkhil commented on GitHub (Sep 1, 2024): Any update on OIDC?

deekerman commented

2026-02-19 23:03:56 -05:00

Author

Owner

@thezak48 commented on GitHub (Sep 1, 2024):

If the ticket is still open then there is no update

@thezak48 commented on GitHub (Sep 1, 2024): If the ticket is still open then there is no update

deekerman commented

2026-02-19 23:03:56 -05:00

Author

Owner

@jlengelbrecht commented on GitHub (Sep 4, 2024):

Is this still being looked at as an option? Would love to tie everything together and enable oidc in my arr app stack

@jlengelbrecht commented on GitHub (Sep 4, 2024): Is this still being looked at as an option? Would love to tie everything together and enable oidc in my arr app stack

deekerman commented

2026-02-19 23:03:56 -05:00

Author

Owner

@bakerboy448 commented on GitHub (Sep 4, 2024):

Is this still being looked at as an option? Would love to tie everything together and enable oidc in my arr app stack

Did you read any of the comment above yours that answer this?

Further asking for updates may likely result in this locked due to spam.

@bakerboy448 commented on GitHub (Sep 4, 2024): > Is this still being looked at as an option? Would love to tie everything together and enable oidc in my arr app stack Did you read any of the comment above yours that answer this? Further asking for updates may likely result in this locked due to spam.

deekerman commented

2026-02-19 23:03:57 -05:00

Author

Owner

@edbourque0 commented on GitHub (Sep 29, 2024):

@edbourque0 commented on GitHub (Sep 29, 2024): +1

deekerman commented

2026-02-19 23:03:57 -05:00

Author

Owner

@wsw70 commented on GitHub (Aug 14, 2025):

Only thing you can do right now is disable authentication and then use something like oauth-proxy in front of your arr services.

Ah, I thought that authentication was compulsory now. I will dig in then, thanks

@wsw70 commented on GitHub (Aug 14, 2025): > Only thing you can do right now is disable authentication and then use something like oauth-proxy in front of your arr services. Ah, I thought that authentication was compulsory now. I will dig in then, thanks