Username + Password based Authentication

When using password-based authentication, you have to manually add users either via the UI or via kubectl.


Create User

Loft UI - Create User

Send Invite Link To User (optional)

If you did not specify a password for the user in step 1, Loft will automatically generate an invite link with a one-time access token for this user. If you send these invite links to your users, they will be logged in and asked to change their password.

Disable Password Auth

Authentication with username and password is enabled by default but you can also disable password-based authentication if you want to force users to use single sign-on (SSO).

To disable password-based authentication, navigate to Admin > Config add these two lines to your config:

oidc: ... # This is your SSO configuration (make sure this is working!)
disabled: true # Disable password-based authentication