Redmine SSO Plugin: SAML, OAuth & OIDC for Self-Hosted Teams¶

RedmineShop SSO & Access Suite brings enterprise-grade single sign-on to self-hosted Redmine. Connect your Okta, Azure AD, Google Workspace, or any SAML 2.0 / OIDC identity provider — no cloud lock-in, no forked community plugins.

Why self-hosted Redmine teams need proper SSO¶

Most organizations running self-hosted Redmine hit the same wall: Redmine does not ship with SAML or OIDC support. The result is orphaned accounts when employees leave, a separate password that security audits flag, and manual onboarding every time someone joins a project. Standard community plugins are often unmaintained, undocumented, or require painful fork management.

What SSO & Access Suite includes¶

redmine_sso_saml — SAML 2.0 SP-initiated login¶

Works with Okta, Azure AD, Google Workspace, Keycloak, and any SAML 2.0-compliant identity provider. Supports configurable attribute mapping, group-to-role sync, and just-in-time user provisioning. No LDAP bridge required.

redmine_sso_oidc — OpenID Connect / OAuth 2.0¶

Connect via OIDC to Keycloak, Auth0, GitHub Enterprise, or any OAuth 2.0 provider. Handles token refresh and session management correctly within Redmine's session model.

Access control add-on¶

Project-level role assignment driven by identity provider groups. When a user is removed from an IdP group, they lose Redmine project access on their next login — no manual cleanup.

Compatibility¶

• Redmine 5.x and 6.x
• Ruby 3.1+, Rails 7.x
• MySQL 8 / PostgreSQL 14+
• Ubuntu 22.04, Debian 12, Alpine (Docker)

See the full compatibility matrix for detailed version support.

Installation¶

Standard Redmine plugin install: copy to plugins/, run bundle install and rake db:migrate, restart. Typical setup time is under 30 minutes once you have your IdP metadata URL. Full walkthrough in the installation guide.

Pricing¶

Annual license per Redmine instance, starting at $299/year for the full suite. Includes all updates and support for the license period. See all tiers.

Join the waitlist¶

SSO & Access Suite is currently in final development. Join the waitlist for launch pricing and early access. Join the waitlist →