NginxProxyManager / NginxProxyManager/nginx-proxy-manager

Request to Add OIDC Support for User Authentication in the Nginx Proxy Manager UI

Open
#5,126 4 comments 33 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
TypeScript
Stars
34.2k
Forks
3.9k
Avg merge
21h 12m
Merged PRs (30d)
20

Description

Hello Nginx Proxy Manager team,

I would like to propose the addition of native support for OIDC (OpenID Connect) authentication in the Nginx Proxy Manager UI.
Currently, user authentication for accessing the admin panel relies on local accounts, which complicates identity management in environments that already use centralized identity providers such as Keycloak, Azure AD, Okta, etc.

Adding OIDC support would allow:

Integration with modern identity providers and enterprise standards (SSO, MFA, groups, claims).

Simplified access without the need for local users or duplicated credentials.

Improved security and user experience (e.g., automatic redirection to the IdP, token-based authentication, logout support).

Enabling the administration panel to support robust authentication flows without relying on tightly coupled external components.

Many modern applications have adopted OIDC as the standard authentication mechanism for administrative interfaces, and we believe this would significantly improve the adoption of Nginx Proxy Manager in enterprise and production environments.

Thank you for considering this enhancement.

Best regards,
Claudio Villegas

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the existing admin-panel authentication flow and how local accounts are handled. Define the required OIDC provider, token, group/claim, redirect, and logout behavior; the issue is complete when these flows are supported for the requested identity providers without relying on duplicated local credentials.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
authentication, frontend, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.