SAML2 Authentication
Let users log into Odoo via an SAML2 identity provider.
This module allows to deport the management of users and passwords in an external authentication system to provide SSO functionality (Single Sign On) between Odoo and other applications of your ecosystem.
Benefits:
Reducing the time spent typing different passwords for different accounts.
Reducing the time spent in IT support for password oversights.
Centralizing authentication systems.
Securing all input levels / exit / access to multiple systems without prompting users.
The centralization of access control information for compliance testing to different standards.
Table of contents
Installation
This addon requires the python module pysaml2.
pysaml2 requires the binary xmlsec1 (on Debian or Ubuntu you can install it with apt-get install xmlsec1)
Configuration
To use this module, you need an IDP server, properly set up.
Configure the module according to your IdP’s instructions (Settings > Users & Companies > SAML Providers).
Pre-create your users and set the SAML information against the user.
By default, the module let users have both a password and SAML ids. To increase security, disable passwords by using the option in Settings. Note that the admin account can still have a password, even if the option is activated. Setting the option immediately remove all password from users with a configured SAML ids.
If all the users have a SAML id in a single provider, you can set automatic redirection in the provider settings. The autoredirection will only be done on the active provider with the highest priority. It is still possible to access the login without redirection by using the query parameter disable_autoredirect, as in https://example.com/web/login?disable_autoredirect= The login is also displayed if there is an error with SAML login, in order to display any error message.
If you are using Office365 as identity provider, set up the federation metadata document rather than the document itself. This will allow the module to refresh the document when needed.
Usage
Users can login with the configured SAML IdP with buttons added in the login screen.
Known issues / Roadmap
clean up auth_saml.request
Changelog
16.0.1.2.1 (2025-05-13)
Bugfixes
Avoid redirecting when there is a SAML error. ()
16.0.1.0.0
Initial migration for 16.0.
Bug Tracker
Bugs are tracked on GitHub Issues. In case of trouble, please check there if your issue has already been reported. If you spotted it first, help us to smash it by providing a detailed and welcomed feedback.
Do not contact contributors directly about support or help with technical issues.
Credits
Contributors
-
Florent Aide <florent.aide@xcg-consulting.fr>
Vincent Hatakeyama <vincent.hatakeyama@xcg-consulting.fr>
Alexandre Brun
Houzéfa Abbasbhay <houzefa.abba@xcg-consulting.fr>
Szeka Wong <szeka.wong@xcg-consulting.fr>
Jeremy Co Kim Len <jeremy.cokimlen@vinci-concessions.com>
Jeffery Chen Fan <jeffery9@gmail.com>
Bhavesh Odedra <bodedra@opensourceintegrators.com>
-
Jairo Llopis
-
Karl Southern
-
Lorenzo Battistini
Maintainers
This module is maintained by the OCA.
OCA, or the Odoo Community Association, is a nonprofit organization whose mission is to support the collaborative development of Odoo features and promote its widespread use.
Current maintainer:
This module is part of the OCA/server-auth project on GitHub.
You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.
1 maintainer
Metadata
1 maintainer
Release files for odoo-addon-auth-saml 16.0.1.3.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| odoo_addon_auth_saml-16.0.1.3.0-py3-none-any.whl | Python 3 | none | any | Details |
Release files / odoo_addon_auth_saml-16.0.1.3.0-py3-none-any.whl
| Download URL | odoo_addon_auth_saml-16.0.1.3.0-py3-none-any.whl |
|---|---|
| Size | 78.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
f5ba46257eea432d5f96f5650f1cd4377da1c44f753588ccffdb3fce4ba359dd
|
|
BLAKE2b-256 checksum How to use checksums |
42b461ad8c825b80f256a9897e02920f6571d4dc67a229422637fc5daae527e6
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.14.4
|
Security for odoo-addon-auth-saml 16.0.1.3.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
