One login.
The right permissions.
AccessBridge is a concept for free SSO and role-based access control integrations for self-hosted open-source applications where users may otherwise receive too much access or where useful access-control features are limited or paywalled.
Built and developed by Bow of Potter Service.
Authentik
Group: Marketing
Role Mapper
Translate group → app permissions
Postiz
Editor • No admin settings
Project idea from u/chymakyr
They described using Authentik for SSO in a self-hosted business stack. The login works, but some apps can still leave the user with default admin-level access or without enough free role controls.
SSO solves login. It does not always solve permissions.
SSO Works
The user signs in once through Authentik or another identity provider.
Permissions Don't
The app may assign a role with much more access than that user actually needs.
Enterprise Wall
Useful SSO or RBAC controls may be restricted to enterprise editions or missing altogether.
AccessBridge
An app-specific connector maps identity-provider users and groups to safer application roles.
A business user should not automatically become an administrator.
Without proper RBAC
- ✓ Normal business tools
- ✓ Content editing
- ✓ System settings
- ✓ Delete users
- ✓ Change integrations
- ✓ Dangerous admin controls
With AccessBridge
- ✓ Normal business tools
- ✓ Approved content editing
- × No system settings
- × No user administration
- × No infrastructure changes
- × No unnecessary admin controls
Start with real self-hosted pain points.
Odoo
Connector research
Postiz
Connector research
n8n
Connector research
Mautic
Connector research
Every app will need its own connector.
Each application has its own authentication system, APIs, plugin model, permissions, and license. AccessBridge would use app-specific integrations rather than pretending one universal method can safely control everything.
Project principles
Connector-based design
Identity-provider group mapping
Safer defaults
Free/open project goal
AccessBridge is a Potter Service project concept.
See other projects built by Bow.