#82634·metabase

Disabling password logins for OSS

Author: mudgeCreated Sep 17, 2026Updated Sep 17, 2026
LabelsPriority:P3Type:New Feature.Needs Triage

What problem will this feature request solve? Following https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf, we would like the ability to fully disable password authentication as we only use Google authentication and yet were vulnerable due to the OSS version of Metabase not offering the ability to disable password authentication.

Describe the solution you'd like. For https://www.metabase.com/docs/latest/people-and-groups/authenticating-with-saml#disabling-password-logins to be available in the OSS version of Metabase.

How does this feature request impact you? Leaving password authentication available when we know we will not use it increases the attack surface of the application.