Sign in to OpenRUM

OpenRUM always offers email and OpenRUM password sign-in. An Instance Owner can also enable Google, GitHub, LDAP, and multiple OpenID Connect (OIDC) providers. The login page displays an external method only after it is fully configured and enabled.

Choose a method

Email and passwordUse a local account or recover access with the setup Owner.

GoogleConnect a Google OAuth web application for Google accounts or Workspace.

GitHubConnect a GitHub OAuth App and a verified primary email address.

OpenID ConnectConnect an enterprise identity provider through its OIDC issuer.

LDAPSign in directly against a directory over LDAPS or StartTLS.

What happens after external sign-in

A first-time external user gets a pending account. They can view access status and sign out; an Organization administrator must add their email through the existing member flow and assign a role before they can use the Console. A user who needs an Instance administrator role must also set an independent OpenRUM password in Account.

Matching email addresses do not merge accounts. If you already have an OpenRUM account, sign in with your current method, open Account → Connected sign-in methods, and connect the new identity there before using its login button. You can disconnect an identity while another working sign-in method remains.

For Instance Owners

External methods require encrypted secret storage and provider-specific configuration. Keep the local Owner password available for recovery. See the Console authentication deployment guide for the shared prerequisites.