Redmine SSO Plugin: SAML, OAuth & OIDC for Self-Hosted Teams
RedmineShop SSO & Access Suite brings enterprise-grade single sign-on to self-hosted Redmine. Connect your Okta, Azure AD, Google Workspace, or any SAML 2.0 / OIDC identity provider — no cloud lock-in, no forked community plugins.
Why self-hosted Redmine teams need proper SSO
Most organizations running self-hosted Redmine hit the same wall: Redmine does not ship with SAML or OIDC support. The result is orphaned accounts when employees leave, a separate password that security audits flag, and manual onboarding every time someone joins a project. Standard community plugins are often unmaintained, undocumented, or require painful fork management.
What SSO & Access Suite includes
redmine_sso_saml — SAML 2.0 SP-initiated login
Works with Okta, Azure AD, Google Workspace, Keycloak, and any SAML 2.0-compliant identity provider. Supports configurable attribute mapping, group-to-role sync, and just-in-time user provisioning. No LDAP bridge required.
redmine_sso_oidc — OpenID Connect / OAuth 2.0
Connect via OIDC to Keycloak, Auth0, GitHub Enterprise, or any OAuth 2.0 provider. Handles token refresh and session management correctly within Redmine's session model.
Access control add-on
Project-level role assignment driven by identity provider groups. When a user is removed from an IdP group, they lose Redmine project access on their next login — no manual cleanup.
Compatibility
- Redmine 5.x and 6.x
- Ruby 3.1+, Rails 7.x
- MySQL 8 / PostgreSQL 14+
- Ubuntu 22.04, Debian 12, Alpine (Docker)
See the full compatibility matrix for detailed version support.
Installation
Standard Redmine plugin install: copy to plugins/, run bundle install and rake db:migrate, restart. Typical setup time is under 30 minutes once you have your IdP metadata URL. Full walkthrough in the installation guide.
Pricing
Annual license per Redmine instance, starting at $299/year for the full suite. Includes all updates and support for the license period. See all tiers.
Join the waitlist
SSO & Access Suite is currently in final development. Join the waitlist for launch pricing and early access. Join the waitlist →