Auto-login: set application launch URLs (+ grafana auto_login) so clicking an app signs in #17

Open
opened 2026-08-02 16:24:31 +10:00 by unkinben · 0 comments
Owner

Problem
Apps show a local login page + a 'Log in with OIDC' button; users want click-app -> straight in. Redirect URIs cannot do this. Authentik application launch URLs (SP-init endpoints) + per-app auto_login are the levers.

Proposal

  • add optional meta_launch_url per oauth2 app; set each to its SP-initiated login endpoint (argocd /auth/login, netbox /oauth/login/oidc/, grafana /login/generic_oauth, gitea /user/oauth2/authentik, rancher login route) so clicking the Authentik tile bounces through login
  • companion (argocd-apps): set grafana auth auto_login=true so a direct visit redirects to Authentik

Acceptance

  • clicking an app in the Authentik dashboard logs the user straight in; grafana direct visits auto-redirect; no manual button press.
**Problem** Apps show a local login page + a 'Log in with OIDC' button; users want click-app -> straight in. Redirect URIs cannot do this. Authentik application launch URLs (SP-init endpoints) + per-app auto_login are the levers. **Proposal** - add optional meta_launch_url per oauth2 app; set each to its SP-initiated login endpoint (argocd /auth/login, netbox /oauth/login/oidc/, grafana /login/generic_oauth, gitea /user/oauth2/authentik, rancher login route) so clicking the Authentik tile bounces through login - companion (argocd-apps): set grafana auth auto_login=true so a direct visit redirects to Authentik **Acceptance** - clicking an app in the Authentik dashboard logs the user straight in; grafana direct visits auto-redirect; no manual button press.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/terraform-authentik#17