Looking for selfhosted inventory management wit SSO
from kalidali@feddit.org to selfhosted@lemmy.world on 10 Oct 2024 19:57
https://feddit.org/post/3647836
from kalidali@feddit.org to selfhosted@lemmy.world on 10 Oct 2024 19:57
https://feddit.org/post/3647836
I’m looking for a selfhosted app for inventory management with SSO support.
I already looked ad Grocy and Homebox. Grocy seems to be a really good app for the purpose. It’s overloaded with features but fortunately you can deactivate the ones you don’t need.
The only thing missing is SSO support via OIDC or SAML. Are there any alternatives that do support SSO?
threaded - newest
Possibly dumb question: why not use an Authentik outpost with a reverse proxy to enforce SSO? It wouldn’t be “baked in” so to speak, but it would be fully OIDC and as long as you’re just running it through a web browser. Biggest downside is you’d need 2 logins (one for the outpost and one for the app). I’d assume the sso is specifically for the extra security though, so that shouldn’t be a problem outside of it being a little hassle.
That’s the point. I don’t want multiple logins. That’s what SSO is for XD I want the SSO to be only login, like I configured any other app I have so far.
So Grocy doesn’t directly support OIDC/SAML but it does support auth being passed along via the reverse proxy. This is how my grocy is configured. No double logins required.
Do you maybe have a link to the documentation for this configuration?
github.com/grocy/grocy/issues/828
SnipeIT is really good and supports SSO including via LDAP.
Snipe-IT is mainly for IT asset and license management as far as I saw in the demo. Or is this just a demo setup? Can you customize it for the items you want to manage, e.g. groceries or tools?
SnipeIT just cares about serial numbers, models and manufacturers (you can just use a serial number in the asset tag section) for assets and I think consumables drop a bunch of those requirements. You might be able to put groceries under consumables? I’m less familiar with consumables in SnipeIT to be honest.