Re-viving an old thread, I stumbled upon the same problem and finally set up a solution that allows for user authentication + limiting access to certain sitemap(s) based on user credentials. Don’t know if someone is interested, but if this is the case, I am happy to explain how I did it (a bit geeky, but acceptable I believe - a combination of Nginx user authentication + overriding /rest/sitemaps call based on user credentials -> works only with native phone OpenHab apps but that was enough for me). Just let me know and I’ll write a small how-to
