Security in Icinga Web: Features and Configuration
How to configure password policies, TOTP two-factor authentication, OpenID Connect single sign-on, roles and restrictions, and the new Content Security Policy page.
Who Gets In, and What They Get to See
Most Icinga Web installations start with one admin account, local users and the default role. That works until the setup carries real operational weight and more than a handful of people log in. This webinar walks through the authentication and authorization features Icinga Web ships today, and shows the configuration behind each of them.
Icinga Web 2.14 added configurable password policies and a Content Security Policy you can inspect instead of guess at. Two modules extend the login itself: Icinga TOTP Web 1.0.0 for time-based one-time passwords, and Icinga Web SSO 1.0.0 for OpenID Connect. On the authorization side we go through roles, permissions and restrictions, the part that decides what a user sees once they are past the login form.
This webinar takes place on September 23, 2026 at 15:00 CEST.
In this session, we cover:
- Password policies in Icinga Web 2.14: the built-in Common policy with its 12-character minimum, mixed case, digit and special character, and how to register your own rules through the
PasswordPolicyHook - Two-factor authentication with Icinga TOTP Web 1.0.0: setting up the database resource, issuer name and clock drift, and walking a user through enrollment with QR code, raw secret and an SVG backup
- Single sign-on with Icinga Web SSO 1.0.0: configuring one or more OpenID Connect providers, choosing the claim a username is derived from, and mapping provider groups onto Icinga Web groups
- Roles, permissions and restrictions: granting access to modules and actions, and using filter-based restrictions so a team only sees the hosts and services that belong to it
- The new Content Security Policy settings page: reading the effective policy grouped by source, the security analysis that flags risky keywords and schemes, and when to take manual control
- Interactive Q&A session
The session is aimed at administrators who operate Icinga Web for a team rather than for themselves: everything is shown as configuration, in the web interface and in the files behind it.
Register
September 23, 2026, 15:00 CEST