NginxProxyManager / NginxProxyManager/nginx-proxy-manager
Request to Add OIDC Support for User Authentication in the Nginx Proxy Manager UI
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 34.2k
- Forks
- 3.9k
- Avg merge
- 21h 12m
- Merged PRs (30d)
- 20
Description
Hello Nginx Proxy Manager team,
I would like to propose the addition of native support for OIDC (OpenID Connect) authentication in the Nginx Proxy Manager UI.
Currently, user authentication for accessing the admin panel relies on local accounts, which complicates identity management in environments that already use centralized identity providers such as Keycloak, Azure AD, Okta, etc.
Adding OIDC support would allow:
Integration with modern identity providers and enterprise standards (SSO, MFA, groups, claims).
Simplified access without the need for local users or duplicated credentials.
Improved security and user experience (e.g., automatic redirection to the IdP, token-based authentication, logout support).
Enabling the administration panel to support robust authentication flows without relying on tightly coupled external components.
Many modern applications have adopted OIDC as the standard authentication mechanism for administrative interfaces, and we believe this would significantly improve the adoption of Nginx Proxy Manager in enterprise and production environments.
Thank you for considering this enhancement.
Best regards,
Claudio Villegas
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the existing admin-panel authentication flow and how local accounts are handled. Define the required OIDC provider, token, group/claim, redirect, and logout behavior; the issue is complete when these flows are supported for the requested identity providers without relying on duplicated local credentials.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- authentication, frontend, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100