3
Feature Request: Support login_hint Parameter for SSO OAuth Authorization Requests
Source: dani-garcia/vaultwarden#7280 · opened by @flagersgit
Summary Add support for passing the OpenID Connect / OAuth 2.0 login_hint parameter when Vaultwarden initiates authentication requests to an external SSO provider. Use Case Many identity providers support the optional login_hint parameter on the /authorize endpoint. This allows the client application to provide a suggested username, email address, or account identifier to the IdP, improving the user experience by: • Pre-filling the username field on the login page. • Helping users with multiple accounts select the correct identity. • Reducing friction during re-authentication flows. • Supporting IdP-specific account routing and home realm discovery features. Proposed Behavior When redirecting users to the OAuth/OIDC authorization endpoint, Vaultwarden could optionally include: The value could be sourced from: • The email address entered on the Vaultwarden login page before SSO redirection. • A configurable template or…
No pledges yet. Be the first to back this.
Comments
Similar requests
Default organization flow for `SSO_ONLY`
5 votes · 0 comments
Change email via SSO without user interaction
2 votes · 0 comments
Force accounts to sign in using SSO only while retaining non-SSO logins.
1 vote · 0 comments
Feature: Auto-provision new users on first SSO login (no manual admin invite required)
1 vote · 0 comments
Move SSO_CLIENT_SECRET to the Read Only Admin Panel or Encrypt it
1 vote · 0 comments
No comments yet.