Skip to main content
Email/password authentication is always enabled and works out of the box, with no configuration needed. The first user to sign up becomes an admin. We recommend adding Google OAuth, OIDC, or SAML for production deployments. Once SSO works, password login and sign-up can be turned off entirely.
Versions before v4.4.0 required AUTH_TYPE=basic. Since v4.4.0 the variable is inert and it is planned for full removal in v4.5.
If you have questions about which authentication approach is best for your organization, don’t hesitate to contact us
  • we’re happy to help you choose the right solution.

​
Password Requirements

Passwords must be 8 to 64 characters by default. The length limits and character-class requirements (uppercase, lowercase, number, special character) are configurable at Admin Panel → Organization → Security & Hardening.

​
Email Verification

Enabling email verification blocks your users from signing in until they click their verification email. Using Docker: Set the following in your .env file:
Using Helm: Set the following in your values.yaml file:

​
Next Steps

Set up Google OAuth

Google OAuth is a secure and easy way to authenticate users with their Google accounts.

Other Onyx Configuration Options

There are many other configuration options available for Onyx.