OIDC with UniFi Identity

UniFi Identity Enterprise can act as an OpenID Connect provider for internal applications.

1. In UniFi Identity Enterprise, add an application with the OIDC sign-on method:
2. Redirect URI: https://hangar.example.com/auth/oidc/unifi/callback.
3. Copy the client ID, client secret and issuer URL that it shows.
4. Assign the users or groups who may use Hangar.
5. Configure Hangar:

oidc:
  providers:
    - id: unifi
      name: UniFi
      issuer: <issuer URL from the application>
      client_id: <client ID>
      scopes: [openid, profile, email, groups]
      claims: {username: preferred_username, email: email, name: name, groups: groups}
      admin_groups: [hangar-admins]
      auto_create_users: true