Plugins support modern protocols like OAuth2 for secure email and agent logins.
To maintain a secure, fast, and crash-free support center, keep these best practices in mind:
| Plugin Name | Purpose | Notes | |-------------|---------|-------| | audit | Logs administrative actions for security auditing | Tracks who changed what, and when | | auth-2fa | Two‑factor authentication for agent accounts | Adds an extra layer of security to logins | | auth-ldap | Authenticate against an LDAP directory (e.g., Active Directory) | Allows centralised user management | | auth-oauth2 | OAuth2 authentication (e.g., Google, Microsoft) | Enables single sign‑on (SSO) | | auth-passthru | Pass‑through authentication for external identity providers | Useful for custom SSO setups | | auth-password-policy | Enforces password strength rules for agents | Increases security | | storage-fs | Stores attachments on the server’s file system instead of the database | Reduces database bloat | | storage-s3 | Stores attachments in Amazon S3 | Offloads storage to the cloud, ideal for high‑volume help desks |
While not strictly plugins, community modifications can completely overhaul the legacy user interface of osTicket to make it mobile-responsive and modern.
. You’ll see your new plugin in the list. Click it, configure any settings, and hit What’s Next? Kanboard plugin - osTicket Forum
If you run osTicket using the popular devinsolutions/docker‑osticket image, plugin management is partially automated. The container includes a predefined set of official plugins (audit, auth‑2fa, auth‑ldap, auth‑oauth2, storage‑fs, storage‑s3, etc.) that are downloaded and installed as .phar archives during the build process. The container also implements hash‑based verification for third‑party plugins, such as the Slack integration, to ensure integrity.
Because osTicket has an active open-source community, independent developers have built plugins to address niche needs that the official team hasn't covered.
If you need custom functionality, you can build your own. Note that official documentation for newer versions (1.17+) is limited, so reviewing the official GitHub repo is the best way to learn. Plugin Structure: Every plugin needs a plugin.php
The osTicket team maintains a set of essential plugins that add production‑ready functionality. These are often bundled in container images and are rigorously tested with each release. The official plugin set includes:
Customizing through plugins is the primary way to extend its core functionality without modifying the source code directly. Whether you need to sync user data with Active Directory , move heavy attachments to Amazon S3 , or integrate with Slack , plugins provide a modular way to build a more powerful support desk. Essential osTicket Plugins
On the spam‑fighting front, the offers server‑side form validation that integrates directly into ticket submission forms, blocking automated bot attacks without annoying legitimate users. For even more sophisticated protection, the mosparo plugin brings advanced spam detection capabilities to osTicket forms.