Code-server: SSO Integration

[sajjad207]

Is it possible to integrate code-server to an SSO provider rather than using the passwords generated by default?

[deansheather]

At the moment, code-server only supports password authentication. If you want to use another authentication provider, you'll need to use a proxying service like CloudFlare Access, BeyondCorp, etc.

[sajjad207]

thanks @deansheather

[deansheather]

Another feature would be a local authentication provider with usernames and passwords for multiple users, once we sort out collaboration stuff.

[desimone]

FYI, for those looking for an open-source solution check out pomerium. We've got a guide for vs code server too.

[sr229]

@desimone that's an awesome integration! If there's any other SSO proxy like this would be awesome to be documented as well. For everyone, please let me know other ways of doing it from other people so we can compile it as a documentation, thanks!

[sr229]

I'll be porting over the Pomerium example for SSO since I think it'll be a great help for everyone.

[nhooyr]

Definitely use a reverse proxy for this.

[karelbilek]

Note, there is issue with Pomerium

It does not terminate websockets when user logs out (I found that out on weekend so it might get fixed later). And code server is all websockets. So when user logs out, the VSCode is still open and user can do whatever.

(I don't mean to 💩 on pomerium, it's cool, just that people know this issue. hopefully it will get fixed)

See

https://github.com/pomerium/pomerium/issues/1279