Immich + Casdoor
Single sign-on for Immich
Immich supports OAuth sign-in with any OpenID Connect provider, in the browser and in its mobile apps. With Casdoor, family members or colleagues sign in to your photo library with the account they already have.
https://auth.example.com with your Casdoor address (on Casdoor Cloud, something like https://acme.casdoor.com) and the other example.com addresses with your own.Set up Immich with Casdoor
- 1
Register Immich in Casdoor
In the Casdoor console, open Applications, add an application for Immich, and on its OIDC/OAuth tab copy the Client ID and Client secret. Add these redirect URLs to Redirect URLs:
https://photos.example.com/auth/loginhttps://photos.example.com/user-settingsapp.immich:///oauth-callback
Add the first two for every address you open Immich at; the last one is for the iOS and Android apps.
- 2
Configure OAuth in Immich
In Immich, open Administration → Settings → OAuth, turn on Login with OAuth and fill in:
Issuer URL https://auth.example.com Client ID <client ID> Client Secret <client secret> Scope openid email profile Storage Label Claim preferred_username Button Text Login with Casdoor Auto Register On - 3
Sign in
Save, then open Immich in a private window: the login page has a Login with Casdoor button. Existing users can link their account under Account Settings → OAuth.
Good to know
- Immich matches OAuth users to existing accounts by email, so give Casdoor users the same email they use in Immich.
- Auto Launch skips the Immich login page and goes straight to Casdoor.
Immich settings are from its documentation as of October 2026 (Immich OAuth). Immich is a trademark of its owner.
FAQ
Frequently asked questions
Does it work in the Immich mobile app?
app.immich:///oauth-callback is one of the application's redirect URLs in Casdoor. The app then shows the same OAuth button.Can Casdoor decide who is an Immich admin?
immich_role by default. Without it, users sign in as regular users and you promote admins in Immich itself.Integrations
Single sign-on for your other apps
Ready to secure your next big move?
Put login, single sign-on, MFA, permissions and AI agent access behind one open-source platform, hosted by us or run by you.
Try Casdoor Cloud free
A dedicated instance in the region you choose, from $24.17/month billed yearly with no per-user fees.
Free trialSelf-host for free
Run the same Apache-2.0 Casdoor on your own servers with Docker or Kubernetes.
Read the docsTalk to an expert
Plan a migration, an on-premises rollout or an authorization model with our team.
Contact sales