Integration of Authentik into Yunohost platform

Discuss Advanced use case
,
1

What type of hardware are you using: VPS bought online
What YunoHost version are you running: 12.1.39 (stable)
How are you able to access your server: The webadmin
SSH
Are you in a special context or did you perform specific tweaking on your YunoHost instance ?: Not yet

Describe your issue

I am looking for the best way to integrate Authentik into Yunohost login flow. Basically, I have some external docker apps that are being proxied forwarded (using the redirect app) from Yunohost and users have to manually login to each application. I am looking to make it a seamless experience where users only need to login one instead of multiple times across multiple applications. I have been researching Authentik and I see the it can function as an LDAP store as well as an LDAP Idp. The information surrounding this topic is scarce and not really specific to what I am trying to accomplish. So, I am looking for information on integration feasibility of YNH LDAP integration in Autentik or if there is a better way such as nginx auth forward or a way to integrate YNH LDAP into my apps an additional SSO login option using YNH existing credential store?

I just need a little directionality here to simplify the process for my users and them to not have to authenticate so much to use basic services I have integrated into the platform for my users. Any help or information will be useful

Share relevant logs or error messages

N/A

2

Auth Flow would be:

User authenticates with authentik which redirects the user back to YNH platform and logins them in without further login prompts. Then when the user click on the proxied app tile it takes them to the application and logs them in automatically based on the fact that they are already authenticated with Authentik/LDAP and forwards the credential status to the app for seamless access.

3

Hello and welcome!

This is a difficult subject with lot of implications. However, you can see in our dream map that it’s planned to support Authelia.

I don’t think it’s easily feasible to integrate Authentik in the meantime.