---
layout: default
title: Portainer
parent: Community-Tested OIDC Integrations
grand_parent: Community
nav_order: 1
---

# OIDC Integrations: Portainer

{{ page.path }}

**Note** these setting have been tested with authelia `v4.34.6` and Portainer (CE and EE) `2.12.2`

## Authelia config

The specific client config for portainer.

```yaml
identity_providers:
  oidc:
    clients:
      - id: portainer_client_id
        description: Some description you want to shown on the Authelia consent page
        secret: some secret string which should also be entered in the portainer config
        public: false
        authorization_policy: two_factor
        audience: []
        scopes:
          - openid
          - profile
          - groups
          - email
        redirect_uris:
          - https://portainer.example.com
        userinfo_signing_algorithm: none
```

## Portainer config

To setup Authelia as SSO provider in portainer go to **Settings > Authentication** and select **Authentication method** OAuth and **Provider** Custom and make sure automatic user provision is turned so users get automatically created.

**Note** make sure that Redirect URL matches exacty the redirect_uris in authelia config. Use `preferred_username` as the User identifier which makes sure the portianer user and authelia user have the same username. Scopes should be `openid profile groups email` **do not use commas**

<p align="center">
  <a href="../../images/portainer.gif" target="_blank"><img src="../../images/portainer.gif" width="736"></a>
</p>