Configure single sign-on with OIDC

LXD uses OpenID Connect (OIDC) to authenticate users to the web UI and the CLI without storing local passwords. Instead, users are redirected to an external identity provider’s login page. For details about this process, refer to OpenID Connect authentication.

The following how-to guides provide detailed instructions for the SSO-based identity providers supported by LXD:

• Configure Auth0
• Configure Ory Hydra
• Configure Keycloak
• Configure Entra ID
• Configure Pocket ID

Related topics

How-to guides:

• How to add remote servers

• How to expose LXD to the network

Explanation:

• Remote API authentication