# How to achieve node-red Dashboard editor security using openid/oauth

**URL:** https://discourse.nodered.org/t/how-to-achieve-node-red-dashboard-editor-security-using-openid-oauth/45813
**Category:** Dashboard
**Created:** [18 May 2021 06:15 UTC](https://discourse.nodered.org/t/how-to-achieve-node-red-dashboard-editor-security-using-openid-oauth/45813 "2021-05-18T06:15:09Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![kiru](https://avatars.discourse-cdn.com/v4/letter/k/a9a28c/32.png) [@kiru](https://discourse.nodered.org/u/kiru)
#### Post date: [18 May 2021 06:15 UTC](https://discourse.nodered.org/t/how-to-achieve-node-red-dashboard-editor-security-using-openid-oauth/45813/1 "2021-05-18T06:15:09Z")

</div>

want to perform single sign on(SSO) on editor of node-red dashboard. IDP used is azure AD.  
we have client ID, client secret, redirect URI. what are the options to do SSO using openid/oauth. tried passportjs. but there are only few details.

---

<div class="post-metadata">

### Author: ![Ranki](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/ranki/32/41282_2.png) [@Ranki](https://discourse.nodered.org/u/Ranki)
#### Post date: [18 May 2021 12:55 UTC](https://discourse.nodered.org/t/how-to-achieve-node-red-dashboard-editor-security-using-openid-oauth/45813/2 "2021-05-18T12:55:15Z")

</div>

Hello @kiru,

Did you check the official documentation already? Maybe the chapter „OAuth/OpenID based authentication“ does help you.

[https://nodered.org/docs/user-guide/runtime/securing-node-red](https://nodered.org/docs/user-guide/runtime/securing-node-red)

Cheers  
Ranki

---

<div class="post-metadata">

### Author: ![kiru](https://avatars.discourse-cdn.com/v4/letter/k/a9a28c/32.png) [@kiru](https://discourse.nodered.org/u/kiru)
#### Post date: [18 May 2021 13:09 UTC](https://discourse.nodered.org/t/how-to-achieve-node-red-dashboard-editor-security-using-openid-oauth/45813/3 "2021-05-18T13:09:55Z")

</div>

Hi @Ranki , Thanks for the reply. yes i checked. it has passport strategy implementation details only for twitter and github. but i am checking for passport-azure-ad-oauth2

---

<div class="post-metadata">

### Author: ![Ranki](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/ranki/32/41282_2.png) [@Ranki](https://discourse.nodered.org/u/Ranki)
#### Post date: [18 May 2021 13:35 UTC](https://discourse.nodered.org/t/how-to-achieve-node-red-dashboard-editor-security-using-openid-oauth/45813/4 "2021-05-18T13:35:36Z")

</div>

Did you check for the topic in the forum search? Maybe this can help you:

> [@Own custom OAuth/OpenID provider implementation](https://discourse.nodered.org/t/own-custom-oauth-openid-provider-implementation/9658):
>
> Hello everyone, I need some help if it is possible. Here is the short description of my node-red setup. I want to implement my own custom Passport.js Strategy and use it with node-red. Note: the node-red storage engine is overridden with my own implementation. I have reached the point where I successfully take a JWT token from my own custom provider and it is stored in editor’s (browser) localStorage. The token is attached to every request as a bearer token. But then comes the problem, the edit…

Or maybe @knolleary has an idea.

Cheers  
Ranki

---

<div class="post-metadata">

### Author: ![kiru](https://avatars.discourse-cdn.com/v4/letter/k/a9a28c/32.png) [@kiru](https://discourse.nodered.org/u/kiru)
#### Post date: [19 May 2021 04:45 UTC](https://discourse.nodered.org/t/how-to-achieve-node-red-dashboard-editor-security-using-openid-oauth/45813/5 "2021-05-19T04:45:50Z")

</div>

I checked it. There is no information on passport-azure-ad-oauth2 and how to use it in settings.js file. I was trying on how it was implemented for passport-github. when i click on the button it doesn't redirects to anywhere instead it remains in the same page. @knolleary any idea on this?.

---

<div class="post-metadata">

### Author: ![michaelblight](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/michaelblight/32/445_2.png) [@michaelblight](https://discourse.nodered.org/u/michaelblight)
#### Post date: [20 May 2021 05:56 UTC](https://discourse.nodered.org/t/how-to-achieve-node-red-dashboard-editor-security-using-openid-oauth/45813/6 "2021-05-20T05:56:00Z")

</div>

The documentation shows how you can configure it to work with other providers. The auth module NR provides works with Twitter and Github, but they show an example of how to connect to Twitter without using their auth module. It refers to a passport module called `passport-twitter`. Taking a stab and Googling `passport-azure` turns up `passport-azure-ad-oauth2`, which looks promising for your case. Not that I've done work in this space.

PS. I believe it is considered impolite forum practise to target questions to individuals.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)
#### Post date: [19 June 2021 05:56 UTC](https://discourse.nodered.org/t/how-to-achieve-node-red-dashboard-editor-security-using-openid-oauth/45813/7 "2021-06-19T05:56:31Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
