Single sign-on (OIDC)

Single sign-on lets people sign in to Bitsmith with an account they already have from an identity provider, instead of a separate Bitsmith password. Bitsmith supports any provider that speaks OIDC (OpenID Connect), including Google, Authentik, Keycloak, and Okta.

This is optional. Without it, people sign in with household user accounts.

Set it up

You’ll configure it in two places: your provider, then Bitsmith.

1. In your identity provider, create an application (sometimes called a client) for Bitsmith. Set its redirect (callback) URL to https://<your-server>/auth/oidc/callback. The provider gives you an issuer URL, a client ID, and a client secret.
2. In Bitsmith, open Access, then OIDC settings, and turn it on.
3. Enter the issuer URL, client ID, and client secret, and a provider name to show on the sign-in button (for example “Google”).
4. Use Test connection to confirm Bitsmith can reach the provider, then save.

After saving, the sign-in screen offers signing in with your provider.

Tip

Single sign-on covers signing in to the Bitsmith interface. Reaching network shares from a device still uses a household user’s username and password, since that’s how the SMB protocol authenticates.