OdooWiki OCA HUB

Authenticate via HTTP Remote User

auth_from_http_remote_user folder_open OCA/server-auth open_in_new
Tools License: AGPL-3

Authenticate via HTTP Remote User

auto_awesome What this module does

AI-generated from the code · Odoo 13.0

Lets Odoo trust an external web server that already authenticated the visitor, so users are signed in automatically without typing an Odoo password.

This module is for setups where a front-end web server (for example an SSO gateway) passes the already-authenticated user name to Odoo in an HTTP header. When someone opens the Odoo web client, the module reads that header and, if it matches the login of an active user, signs that user in automatically.

  • A new read-only field sso_key is added on the user record (res.users); it stores a temporary secret used only for this automatic sign-in and is not copied when a user is duplicated.
  • On each visit to the web client, the module checks the incoming header. If the header user differs from the currently logged-in user, the current session is closed and the new one is opened.
  • If no active user matches the header login, access is refused with an Unauthorized response.
  • The stored secret is regenerated on every successful sign-in, so the previous value stops working.
  • Normal Odoo password login still works: if the secret does not match, the standard credential check is used.

It touches the user model and the web client entry point. There are no new menus or reports; the change is invisible except that users arrive already logged in.

Depends on

basewebbase_setup
Models and fields (1)
  • res.users · extends an existing modelsso_key (SSO Key)

Text generated by AI (DeepSeek) from reading the Odoo 13.0 code on GitHub; it may contain mistakes, so check the code before deciding. View the code on GitHub

Availability by version

Reviewed: 2026-11-03
Confirmed (verified in repository and branch) Estimated (unverified) No information

Confirmation status: 2 confirmed, 7 with no information of 9 versions.

Sources · Odoo 12.0

Confirmed on 2026-11-03 in branch 12.0 of OCA/server-auth.

terminal Installation and usage

No verified information

Installation instructions, the distribution package, dependencies and configuration steps are not shown because they have not yet been verified in the module documentation for any version.

info

Data imported from GitHub: this sheet reflects the latest catalog review, not a live lookup. Always check the module documentation and staging before installing in production.