Looking for a recommended strategy for my use case. | authentik | Page 1

inland arch Jul 15, 2024, 9:20 PM

#

Hey, thanks for the help up front.

So I currently have a setup where I'm using my wordpress site as an oauth2 provider for authentik. This part is working out really well. It almost invisibly pulls the users data into authentik when they enroll on my site and updates their authentik user every time they login. This part I'm happy with!

Problem Statement: My users need to have their passwords sync between my Wordpress site and Authentik. Because I use Jellyfin, and the mobile and tv versions of the app don't play well with SSO, I wanted to have a fallback for ldap which is totally possible. The challenge is that I would like the user's password from wordpress to be the password they use as their ldap password. This would mean I somehow securely need to get my users passwords into Authentik from Wordpress or know of another way of doing it (some sort of ldap sync but from wordpress to authentik).

I know this can work the other way around but I'm trying to keep my site's experience pretty seamless and styling Authentik to match my site has proven pretty difficult in itself.

Ultimately looking for advice or creative solutions to the problem. Hope to hear some ideas!

gusty halo Jul 16, 2024, 1:14 AM

#

Probably best thing is to create the ldap service in authentik and see if Wordpress takes ldap, I’m sure it does

#

Gotta create a outpost first, should sync both ways

inland arch Jul 16, 2024, 6:41 AM

#

Yeah I know there are a lot of ldap plugins for wordpress but not many of them offer syncing users out. I was really hoping to keep my enrollment experience on my wordpress site and then carry those users into authentik. dammit jellyfin for not taking proper oauth >.<

wooden rune Jul 19, 2024, 6:05 AM

#

inland arch Hey, thanks for the help up front. So I currently have a setup where I'm using ...

my 2 cents if i am not intruding, I actually implemented the custom forward-auth service for Jellyfin and the approach works fine for all .

#

https://gist.github.com/nielsvanvelzen/ea047d9028f676185832e51ffaf12a6f

Gist

Jellyfin API Authorization

Jellyfin API Authorization. GitHub Gist: instantly share code, notes, and snippets.

inland arch Jul 19, 2024, 1:27 PM

#

I'll definitely take a look 🙂

#

@wooden rune Do you happen to have some documentation on how you set that up in Authentik? This option definitely intrigues me!

#

Could even be a good enough solution to include in the Authentik docs for jellyfin

wooden rune Jul 19, 2024, 1:34 PM

#

inland arch <@981025731482120224> Do you happen to have some documentation on how you set th...

i don't have documentation. i did it for a user as part of community service i do, a while back.

#

#Looking for a recommended strategy for my use case.