OCA/server-auth

Confirmed modules per version

Modules in the repository

• API Key Scope EditableOdoo 17
  apikey_scope_editable

  Lets you choose an optional scope when creating an API key in Odoo, so the key's access can be restricted to a specific area instead of being unrestricted.

• Authentification - System Administrator PasskeyOdoo 12, 14, 15, 16, 17, 18
  auth_admin_passkey

  Lets a system administrator log in as any user by entering a special passkey password defined in the Odoo configuration file, and optionally notifies the user and the administrator by email.

• Authentification - Disable 2FA if PasskeyOdoo 17
  auth_admin_passkey_totp_mail_enforce

  This glue module makes the "Disable 2FA if Passkey" behaviour work together with the module that enforces two-factor authentication by email. It ensures that when a user logs in with a passkey, the email-based 2FA step is skipped.

• Auth Api KeyOdoo 12, 13, 14, 15, 16, 17, 18, 19
  auth_api_key

  Lets administrators create API keys that programs can use to log into Odoo instead of a password, and control whether those keys keep working when the linked user is archived.

• Auth Api Key Server EnvironmentOdoo 12
  auth_api_key_environment

  This module lets you store and manage API keys through Odoo's server environment configuration files instead of typing them directly in the database. It is a glue module that installs automatically when both API Keys and Server Environment are present.

• Auth API key groupOdoo 14, 15, 16, 17, 18, 19
  auth_api_key_group

  Lets administrators create groups of API keys and assign each API key to one or more groups. Grouping alone does not change access; other modules can use these groups to restrict services or records.

• Auth API key server environmentOdoo 14, 15, 16, 17, 18
  auth_api_key_server_env

  Lets you store API keys in the server configuration file instead of the database, so each environment (test, production) uses its own keys and they are not mixed when restoring a database.

• Dynamic groupsOdoo 14
  auth_dynamic_groups

  Lets you define groups whose members are chosen automatically by a condition written in Python, evaluated each time a user logs in.

• Authenticate via HTTP Remote UserOdoo 12, 13
  auth_from_http_remote_user

  Lets Odoo trust an external web server that already authenticated the visitor, so users are signed in automatically without typing an Odoo password.

• Auth JWTOdoo 13, 14, 16, 17, 18
  auth_jwt

  Lets Odoo accept JWT bearer tokens (or a secure cookie) as a login method for API/web routes, configured through JWT Validator records. Administrators define validators that check token signature, audience and issuer, then map the token to an Odoo user.

• Auth JWT TestOdoo 13, 14, 16, 18
  auth_jwt_demo

  Demo/test module that adds sample web endpoints to try out JWT authentication in Odoo, returning the logged-in user's name and email as JSON.

• Auth Jwt Server EnvOdoo 16
  auth_jwt_server_env

  Lets administrators configure JWT authentication settings (secret key, audience, issuer, public key URI) through server environment files instead of entering them in Odoo.

• LDAP Attribute SyncOdoo 12
  auth_ldap_attribute_sync

  Lets administrators map LDAP directory attributes to user fields in Odoo, so user details are filled in automatically when accounts are created or when users log in.

• LDAPS authenticationOdoo 12, 13, 14, 15, 16, 17
  auth_ldaps

  Adds LDAPS (LDAP over SSL) support to Odoo's LDAP authentication, with two new options on the LDAP server configuration: 'Use LDAPS' and 'Skip certificate validation'.

• Auth Oauth AutologinOdoo 13, 14, 15, 16, 17
  auth_oauth_autologin

  Automatically redirects users to the single enabled OAuth provider's login page, hiding the standard Odoo login screen. Administrators can mark one provider as the automatic login provider.

• OAuth Filter by DomainOdoo 16, 18
  auth_oauth_filter_by_domain

  Lets you restrict each OAuth login provider to specific web domains, so only the providers that match the domain the user is visiting are shown on the login page.

• Auth Oauth Login FieldOdoo 18
  auth_oauth_login_field

  When users sign up or log in through an OAuth provider, this module uses the login value returned by the provider instead of the email address, so accounts can have a login that differs from the email.

• OAuth Multi TokenOdoo 12, 13, 14, 15, 16, 17, 18, 19
  auth_oauth_multi_token

  Allows the same OAuth account to be used on several devices at once by storing one access token per connection. Administrators can set a maximum number of simultaneous connections and clear a user's tokens.

• Auth OAuth ROPCOdoo 16
  auth_oauth_ropc

  Lets users sign in to Odoo with their username and password validated against an external OAuth provider, instead of only Odoo's own password. Administrators configure the provider under Settings > Users.

• Authentication OpenID ConnectOdoo 12, 13, 14, 15, 16, 17, 18, 19
  auth_oidc

  Lets users sign in to Odoo with an OpenID Connect provider (such as Azure AD or Keycloak) instead of a local password, using either the authorization code flow or the implicit flow.

• Auth Oidc EnvironmentOdoo 14, 16, 18
  auth_oidc_environment

  Lets administrators keep the OIDC/OpenID Connect client ID and client secret in server environment files instead of typing them in Odoo, so authentication settings can be managed outside the database.

• SAML2 AuthenticationOdoo 12, 13, 14, 15, 16, 17, 18, 19
  auth_saml

  Lets users sign in to Odoo through an external SAML2 identity provider (single sign-on), and lets administrators configure providers, user matching and automatic user creation from the Odoo interface.

• Inactive Sessions TimeoutOdoo 12, 13, 14, 15, 16, 17, 18, 19
  auth_session_timeout

  Automatically logs out users whose Odoo session has been inactive for a configurable delay (2 hours by default), while keeping certain URLs from counting as activity.

• Auth Signup Partner CompanyOdoo 15
  auth_signup_partner_company

  When a new portal user signs up, this module assigns the current company to both the new user and their linked contact, instead of leaving the contact without a company.

• Verify email at signupOdoo 12, 13, 14, 15, 16, 17, 18
  auth_signup_verify_email

  New users signing up from the public page no longer choose a password: they only enter an email address, which is validated, and they set their password later from the activation email.

• MFA SupportOdoo 12
  auth_totp

  Lets users protect their Odoo account with an authenticator app (MFA/TOTP). After the normal password login, they enter a six-digit code from their app, and can mark a device as trusted for 30 days.

• Enforce Two-Factor AuthenticationOdoo 18
  auth_totp_enforce

  Forces internal users to set up an authenticator app (two-factor authentication) before they can access Odoo. Users who are not exempt are held on a setup page at login until they scan a QR code and enter a valid 6-digit code.

• MFA and Password Security CompatibilityOdoo 12
  auth_totp_password_security

  Automatically installed bridge that makes the two-factor authentication module and the password security module work together, forcing users with an expired password to set a new one right after they pass the MFA step.

• 2nd factor authentication via U2FOdoo 12
  auth_u2f

  Adds two-step verification with a physical U2F security key (like a YubiKey) to Odoo logins. Users can register keys, choose a default one, and must tap it after entering their password.

• Case Insensitive LoginsOdoo 12, 13, 14, 15, 16, 17, 18, 19
  auth_user_case_insensitive

  Makes user logins case insensitive, so users can sign in regardless of capitalisation. Existing logins are converted to lowercase when the module is installed.

• Extra user typeOdoo 18
  base_group_subcontractor

  Adds a new "Subcontractor" user type in Odoo that can log into the backend but only sees the Discuss menu, with minimal permissions for the web client to work.

• Empty users passwordOdoo 14, 18
  base_user_empty_password

  Lets administrators clear the login password of one or more users from the Users list, so those users must sign in with another method (for example single sign-on).

• Base User Show EmailOdoo 12, 13, 14, 16, 18
  base_user_show_email

  Separates the user login from the email address in Odoo. The user form now shows a 'Login' label and a visible Email Address field, and the login page asks for a Login instead of an Email.

• Cross Connect ClientOdoo 16, 18
  cross_connect_client

  Lets administrators register other Odoo servers and give selected user groups a menu shortcut that logs them straight into that remote server, without creating a local account there.

• Cross Connect ServerOdoo 16, 18
  cross_connect_server

  Lets other Odoo databases (running the Cross Connect Client module) connect to this database and log their users in automatically, without creating separate passwords. Administrators configure which clients and user groups are allowed.

• Impersonate LoginOdoo 14, 16, 17, 18, 19
  impersonate_login

  Lets authorized users log in as another user to see Odoo exactly as that person does, with a clear way to switch back and a log of every impersonation.

• Password SecurityOdoo 12, 13, 14, 15, 16, 17, 18, 19
  password_security

  Lets administrators define company-wide password rules (expiry, minimum length, required lowercase/uppercase/digits/special characters, reuse history, waiting time between changes) and enforces them whenever users set or reset a password.

• User's Log ViewerOdoo 12, 13, 14, 15, 16, 17, 18, 19
  user_log_view

  Adds an "Authentication logs" smart button on the user form so you can see when each user logged in, grouped by day.

• LDAP groups assignmentOdoo 12, 13, 14, 15, 16, 17
  users_ldap_groups

  Lets administrators map LDAP directory attributes to Odoo groups, so users logging in via LDAP are automatically placed in the right groups, optionally keeping group membership strictly in sync with LDAP.

• LDAP mapping for user name and e-mailOdoo 12, 13, 14, 16, 17, 18
  users_ldap_mail

  Adds two settings to LDAP server configurations so Odoo can read the user's full name and e-mail address from LDAP when creating or updating users.

• LDAP PopulateOdoo 12, 13, 14, 16, 17
  users_ldap_populate

  Adds a Populate button to LDAP server configurations so administrators can create Odoo users from the directory in one click, and optionally deactivate users who no longer exist in LDAP.

• VaultOdoo 13, 14, 15, 16, 18
  vault

  Store passwords, secrets and files in encrypted vaults inside Odoo. Share vaults with other users, send secrets to their inbox, and import or export vaults as files.

• Vault - ShareOdoo 13, 14, 15, 16, 18
  vault_share

  Lets users share a secret or file from the vault with external people through a link and a numeric PIN. Shares expire automatically after a set time or number of accesses.