add sso to readme

bump to 0.5.1+v2026.2.0
Merge pull request 'Add SSO Plugin' (#5 ) from sso into main
2026-02-28 22:05:44 -05:00 · 2026-02-28 22:05:44 -05:00 · 2026-03-01 03:02:35 +00:00 · 2026-03-01 02:54:27 +00:00
1 changed files with 20 additions and 1 deletions
@@ -11,7 +11,7 @@
 * **Backups**: Yes
 * **Email**: No
 * **Tests**: No
-* **SSO**: No
+* **SSO**: Yes

 <!-- endmetadata -->

@@ -40,5 +40,24 @@ Then redeploy with `abra app deploy YOURAPPDOMAIN --force`.
 Now when you login as your user, and visit https://cryptpad.cctest.autonomic.zone/admin/,
 you should be able to access the admin interface for this cryptpad instance. 

+## SSO
+
+To enable SSO, run `abra app config YOURAPPDOMAIN` and set `SSO_ENABLED=true`. On the next deploy, the [CryptPad SSO plugin](https://github.com/cryptpad/sso) will be installed automatically.
+
+You also need to configure the remaining SSO environment variables for your OIDC provider:
+
+- `SSO_PROVIDER_NAME` — display name shown on the login button (e.g. `Keycloak`, `Authentik`)
+- `SSO_OIDC_URL` — OIDC discovery URL for your provider
+- `SSO_CLIENT_ID` — OAuth2 client ID
+- `SSO_JWT_ALG` — JWT signing algorithm (e.g. `RS256`)
+
+The client secret is stored as a Docker secret. Insert it with:
+
+```
+abra app secret insert YOURAPPDOMAIN sso_client_s v1 YOUR_CLIENT_SECRET
+```
+
+Then deploy (or redeploy) to apply: `abra app deploy YOURAPPDOMAIN --force`.
+
 [`abra`]: https://git.coopcloud.tech/coop-cloud/abra
 [`coop-cloud/traefik`]: https://git.coopcloud.tech/coop-cloud/traefik
Author	SHA1	Message	Date
notplants	800e8426ce	add sso to readme	2026-02-28 22:05:44 -05:00
notplants	97209123e0	bump to 0.5.1+v2026.2.0	2026-02-28 22:05:44 -05:00
notplants	899f9d9da0	Merge pull request 'Add SSO Plugin' (#5 ) from sso into main Reviewed-on: coop-cloud/cryptpad#5	2026-03-01 03:02:35 +00:00
notplants	f31c12299d	bump to 0.5.1+v2026.2.0	2026-03-01 02:54:27 +00:00