What is SSO

Signle Sign-On (SSO) is a term used to define a system, where a user signs in once and can then authenticate themselves to all other systems without the need to go through a log-in procedure again.

Libre.moe offers this as the way to authorize yourself against the main account system on https://auth.libre.moe.

Your Account

The SSO system itself manages registration and login to your account, as well as self-service options for changing your password or user info and vieweing your active sessions.

Logging into other services

Once you are logged into the SSO system, simply clickling on a login-button on most services is enough for you to automatically log in. Some services like Nextcloud, which do not offer unauthenticated access, even do this automatically. Others like GitLab allow you to chose multiple login providers and thus prompt you first.

When you are on a system where you are not logged in or when your session expires, you will see the account system's SSO log-in page instead.

Supported Services

Most services on this domain use this way of logging in and managing user identity. The exceptions here are as follows:

• Szurubooru instances: szuru.libre.moe and kirei.libre.moe don't support SSO
• Vaultwarden: not practical as the site itself needs access to your password for decrypting your data
• E-Mail: not practical as the SMTP/IMAP servers can't really redirect you to an SSO log in page.

As you can see, the exceptions are services that have not built in support, or where SSO is impractical. The latter is because the way SSO works (via OpenID Connect in this case), is that the service redirects you to the SSO login page. This allows you to have a unified login-flow even when using 2FA or allowing you to respond to events like password expirations. It also makes sure no service itself will need to handle your password except for the SSO system.