Feature Request: Accounts improvement initiative
Author: xet7Created Jul 27, 2025Updated Jul 6, 2026
LabelsInternalFeature:User-accountsMetaFeature:User-accounts:Header-LoginFeature:User-accounts:NextcloudFeature:User-accounts:OracleFeature:User-accounts:AutologinFeature:User-accounts:Forgot-Password
From https://forums.meteor.com/t/accounts-improvement-initiative/63792/4
Meteor 3 WeKan Status
- Uses mquandalle-jade templates, ported to Meteor 3.
- Replacing hardcoded roles with Meteor Roles package? #3022 #1122
Works
2. Logging Admin actions and 4. Impersonate user
- At Admin Panel / People / People, at user options / Impersonate user, it stays impersonated. After reloading webpage, it returns to original logged user, stopping impersonating.
- PR https://github.com/wekan/wekan/pulls?q=is%3Apr+is%3Aclosed+impersonate
- Logging actions of Admin that impersonated user to database collection/table impersonatedUsers https://github.com/wekan/wekan/commit/3908cd5413b775d1ee549f0a95304cf9998d3855
- Impersonate user button https://github.com/wekan/wekan/blob/main/client/components/settings/peopleBody.js#L1124
- Docs https://github.com/wekan/wekan/blob/main/docs/Login/Impersonate-user.md
3. First user is Admin, next ones are Normal users
Admin Panel: Disable self-registration, Disable forgot password, Invite users
- https://github.com/wekan/wekan/commit/b85db43c4755cf54e550f664311cd95097d68ae1
- https://github.com/wekan/wekan/blob/main/CHANGELOG.md#v0111-rc2-2017-03-05-wekan-prerelease
- #3310
- #1426
- #1384
Disable password login
- PR https://github.com/wekan/wekan/pull/3014
- Docs https://github.com/wekan/wekan/blob/main/docs/Login/Disable-Password-Login.md
Autologin with OIDC/OAUTH2
- PR https://github.com/wekan/wekan/pull/4588
- Commit https://github.com/wekan/wekan/commit/284f4401369aadcec72e67fa935dfc3a9fead721
- Docs https://github.com/wekan/wekan/blob/main/docs/Login/autologin.md
Forgot password
OAuth2 forked package
- https://github.com/wekan/wekan/tree/main/packages/wekan-oidc
- https://github.com/wekan/wekan/tree/main/packages/wekan-accounts-oidc
Login
Create User
Azure AD B2C using OAuth2
- Commit https://github.com/wekan/wekan/commit/93be112a9454c894c1ce3146ed377e6a6aeca64a
- Docs https://github.com/wekan/wekan/blob/main/docs/Login/B2C.md
Google Login
LDAP AD Simple Auth
- PR https://github.com/wekan/wekan/pull/3909
- Docs https://github.com/wekan/wekan/blob/main/docs/Login/LDAP-AD-Simple-Auth.md
ADFS 4.0 using OAuth 2 and OpenID
- Docs https://github.com/wekan/wekan/blob/main/docs/Login/ADFS.md
- Code https://github.com/wekan/wekan/blob/main/CHANGELOG.md#v430-2020-09-13-wekan-release
OAuth2, RocketChat, Auth0, etc
Azure
Nextcloud
Oracle OIM with OAuth2 OIDC
- Commit https://github.com/wekan/wekan/commit/ec8a78537f1dc40e967de36a02ea09cf7398318a
- Docs https://github.com/wekan/wekan/blob/main/docs/Login/Oracle-OIM.md
Improvements possible
Keycloak
- Docs https://github.com/wekan/wekan/blob/main/docs/Login/Keycloak/Keycloak.md
- https://github.com/wekan/wekan/issues/3542
LDAP
- Docs https://github.com/wekan/wekan/blob/main/docs/Login/LDAP.md
- Seems to work #5844
- Better sync of users and teams like with this Python script? https://github.com/wekan/wekan/blob/main/docs/Login/ldap-sync/ldap-sync.py
- #802
- #4875
- #4419
- #4394
- #4104
- #4036
- #3707
- #3700
Fix OAUTH2_LOGIN_STYLE=redirect
- Currently only popup login works. It would help to have redirect login fixed, it would help with mobile login and popup blockers.
- #5695
1. Logout all sessions
- Logout does work, but there could be added some logout URL
- oidc: upon logout the oidc-session should be invalidated #5061
- Logout API ? #1437
- Using API with Python https://github.com/wekan/wekan/blob/main/api.py
- API code at models directory https://github.com/wekan/wekan/tree/main/models
- API docs at https://wekan.fi/api/ , created with this script https://github.com/wekan/wekan/blob/main/releases/rebuild-docs.sh
Brute force protection
- Check does it need fixes
- #2458
- Size reduction https://github.com/wekan/wekan/commit/23e5e1e3bd081699ce39ce5887db7e612616014d
- Added back packages https://github.com/wekan/wekan/commit/00768b4392109dec62a4dcf44dbceb295990d785
OAUTH2_CA_CERT does not work
- WeKan issue #5600
spring-authentication-server
- #5150
- #5174
Unable to remove empty users from Board and Card members
- #4847
Don't allow Oauth2 auth for users that don't already exist in the database
- #4736
Web interface show differents data vs mongodb
- #4897
Performance issue: Changes in cards and boards are not immediately recorded
- #4823
Cards not works properly after created by REST API
- #4826
User Profile is reset when changing the authentication method from LDAP to OIDC
- #4560
As WeKan administrator, I want a search by team name on the /people page to show me the users on a team
- #4510
Login with HTTP headers
- #2019
- #4311
- #3001
Impersonate user for REST API
- #5474
Login and Register page webhook
- #2290
TODO
Windows login SSPI
- #5758
- #4361
SAML
CAS
- Docs: https://github.com/wekan/wekan/blob/main/docs/Login/CAS.md
- #3204
- https://github.com/wekan/wekan/commit/214c86cc22f4c721a79ec0a4a4f3bbd90d673f93
- Maybe RocketChat has CAS ?
Apple
- AtmosphereJS packages https://atmospherejs.com/?q=apple
- #2458
2FA
- AtmosphereJS package https://atmospherejs.com/meteor/accounts-2fa
- #3058
- Maybe RocketChat has 2FA ?
- AtmosphereJS packages https://atmospherejs.com/?q=linkedin
GitLab
- AtmosphereJS packages https://atmospherejs.com/?q=GitLab
- #2698
SQRL
- #2460
Bitbucket
- #1324
MCP
Source: wekan/wekan