[GH-ISSUE #1190] Disable Login when OIDC is enabled #1801

Closed
opened 2026-04-16 08:38:17 -05:00 by GiteaMirror · 7 comments
Owner

Originally created by @miloschwartz on GitHub (Aug 1, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/1190

Originally assigned to: @miloschwartz on GitHub.

Discussed in https://github.com/orgs/fosrl/discussions/674

Originally posted by seamon67 May 4, 2025
Now that Pangolin supports OIDC, it would be nice to be able to disable email+password login once everything is configured.

Originally created by @miloschwartz on GitHub (Aug 1, 2025). Original GitHub issue: https://github.com/fosrl/pangolin/issues/1190 Originally assigned to: @miloschwartz on GitHub. ### Discussed in https://github.com/orgs/fosrl/discussions/674 <div type='discussions-op-text'> <sup>Originally posted by **seamon67** May 4, 2025</sup> Now that Pangolin supports OIDC, it would be nice to be able to disable email+password login once everything is configured.</div>
GiteaMirror added the new feature label 2026-04-16 08:38:17 -05:00
Author
Owner

@ccoder1337 commented on GitHub (Aug 12, 2025):

For the product we are building at my company, service personnel manages our end users and their access through our proprietary interface. This is because our end users can use the their IdP account to access other services we provide that are cloud only. This feature is just what we are looking for. It would make the experience much more seamless.

<!-- gh-comment-id:3178972139 --> @ccoder1337 commented on GitHub (Aug 12, 2025): For the product we are building at my company, service personnel manages our end users and their access through our proprietary interface. This is because our end users can use the their IdP account to access other services we provide that are cloud only. This feature is just what we are looking for. It would make the experience much more seamless.
Author
Owner

@adrianeastles commented on GitHub (Aug 12, 2025):

Would this PR help in anyway? #1132

<!-- gh-comment-id:3178982948 --> @adrianeastles commented on GitHub (Aug 12, 2025): Would this PR help in anyway? #1132
Author
Owner

@ccoder1337 commented on GitHub (Aug 12, 2025):

Yes of course, but complete bypass would be ideal for us since we configure pangolin through the API only. This is great though.

<!-- gh-comment-id:3179015146 --> @ccoder1337 commented on GitHub (Aug 12, 2025): Yes of course, but complete bypass would be ideal for us since we configure pangolin through the API only. This is great though.
Author
Owner

@adrianeastles commented on GitHub (Aug 12, 2025):

@miloschwartz I can see you added It to the "Mid Term" stage. if you want, I could extend the current PR #1132 to include an option to disable the section (password) on the sign in page for resources.

<!-- gh-comment-id:3179030402 --> @adrianeastles commented on GitHub (Aug 12, 2025): @miloschwartz I can see you added It to the "Mid Term" stage. if you want, I could extend the current PR #1132 to include an option to disable the section (password) on the sign in page for resources.
Author
Owner

@oschwartz10612 commented on GitHub (Aug 16, 2025):

@adrianeastles coming in the next release and already in dev 😄

<!-- gh-comment-id:3193397998 --> @oschwartz10612 commented on GitHub (Aug 16, 2025): @adrianeastles coming in the next release and already in dev :smile:
Author
Owner

@toddmryan commented on GitHub (Oct 2, 2025):

Discussed in https://github.com/orgs/fosrl/discussions/674

Originally posted by seamon67 May 4, 2025 Now that Pangolin supports OIDC, it would be nice to be able to disable email+password login once everything is configured.

It would be great if this could be controlled by URL. For example, all access via public interface would be OIDC only, but access via private IP would provide username/password prompt. I never want to allow an admin to log in via the public interface.

<!-- gh-comment-id:3360785865 --> @toddmryan commented on GitHub (Oct 2, 2025): > ### Discussed in https://github.com/orgs/fosrl/discussions/674 > Originally posted by **seamon67** May 4, 2025 Now that Pangolin supports OIDC, it would be nice to be able to disable email+password login once everything is configured. It would be great if this could be controlled by URL. For example, all access via public interface would be OIDC only, but access via private IP would provide username/password prompt. I never want to allow an admin to log in via the public interface.
Author
Owner

@ngregrichardson commented on GitHub (Mar 1, 2026):

Does this feature exist now? Can't find any reference to it.

<!-- gh-comment-id:3980024808 --> @ngregrichardson commented on GitHub (Mar 1, 2026): Does this feature exist now? Can't find any reference to it.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#1801