Skip to main content
Version: 2026.2

Pimcore OpenID Connect

The OpenID Connect bundle adds single sign-on to Pimcore Studio. Users authenticate with an external identity provider, such as Okta or OneLogin, and Pimcore creates or updates a matching local user from the claims the provider returns. Any provider that implements the OpenID Connect Discovery spec works.

This is an enterprise bundle; it requires a Pimcore enterprise subscription.

Pimcore Studio login page with a "Login with Onelogin" button below the local credentials formPimcore Studio login page with a "Login with Onelogin" button below the local credentials formPimcore Studio login page with a "Login with Onelogin" button below the local credentials form

Features in a Nutshell​

  • Configure one or more OpenID Connect providers in parallel, each with its own login button.
  • Optionally redirect straight to a default provider, skipping the local credentials form.
  • Map provider claims to Pimcore user fields and roles, with a built-in debugging tool to verify the mapping.
  • Store the configuration as Symfony config, in the Pimcore SettingsStore, or manage it read-only from code.

Documentation Overview​

  • Installation: install the bundle and open the routes its login flow needs.
  • Configuration: configure providers and understand the Studio login flow.
  • Technical Details: user and role mapping, token validation, caching.
  • Extending: pre-response events for the configuration panel.
  • Upgrade: breaking changes per release.