Install Redmine SSO Suite (Community)

1. Install the plugin

Docker (official Redmine image)

# Extract the tarball into your plugins volume
tar -xzf redmine_sso_suite-0.9.0-beta.tar.gz -C /path/to/redmine/plugins/
# Restart Redmine
docker compose restart redmine

Bare metal

cd /path/to/redmine/plugins
tar -xzf ~/Downloads/redmine_sso_suite-0.9.0-beta.tar.gz
# Symlink name must be redmine_sso_suite
sudo systemctl restart redmine   # or your process manager

Verify under Administration → Plugins that Redmine SSO Suite (Community) v0.9.0-beta appears.

2. Register the OAuth redirect URI

In your IdP, create an OIDC client and set the redirect URI to:

https://YOUR-REDMINE-HOST/sso/oauth/callback

Copy the issuer URL, client ID, and client secret (if confidential client).

3. Configure the plugin

1. Go to Administration → Plugins → Redmine SSO Suite → Configure
2. Enable SSO login
3. Paste issuer URL, client ID, and secret
4. Leave Enforce SSO for non-admin off until you verify login works
5. Save — validation will reject invalid URLs

4. Test login

1. Open an incognito window → Redmine login page
2. Click Sign in with SSO
3. Authenticate at your IdP
4. Confirm a JIT user is created (if auto-create is enabled)
5. Confirm admin can still use password login (break-glass)

5. Optional: enforce SSO

After staging verification, enable Enforce SSO for non-admin users. Administrators retain local password login.

Troubleshooting

• Invalid state after IdP redirect
• Docker issuer URL mismatch
• Open a support request (Community bugs → GitHub Issues)