langflow-ai
Single Sign On (SSO) support with OIDC or OAuth2
Feature Request
For some of our workloads we cannot use the hosted cloud solution from Langflow/DataStax and cannot get security approval for a self hosted solution without Single Sign On (SSO).
Motivation
- Passwords leak and is a major security issue
- Users forget them
- With SSO, we would not need "wait for admin approval" since the OAuth flow would take care of that
Your Contribution
Happy to contribute, just not as the lead.
#1864 I know Casbin library is in the roadmap to be integrated in Langflow. I'm wondering if still in top list of requested features!
Hi, @hakan-77. I'm helping the langflow team manage their backlog and am marking this issue as stale.
Your request for implementing Single Sign On (SSO) support using OIDC or OAuth2 highlights the need for enhanced security and streamlined user access, especially for workloads that cannot utilize the hosted solution. Other contributors, including codenprogressive, have also emphasized the importance of this feature, noting challenges in obtaining corporate security approval without it. Additionally, there was mention of integrating the Casbin library as a related feature of interest.
Could you please let us know if this issue is still relevant to the latest version of the langflow repository? If it is, feel free to comment here to keep the discussion alive. Otherwise, you can close the issue yourself, or it will be automatically closed in 7 days. Thank you!
![dosubot[bot] avatar](https://avatars.githubusercontent.com/in/324583?v=4 "Published by a pub.dev verified publisher"){kind=small}
@ogabrielluiz, the user has confirmed that the implementation of Single Sign On (SSO) support using OIDC or OAuth2 is still important for their use case. Could you please assist them with this issue?
This is extremely and urgently needed for my organization too. Please increase the priority. TY!
hello, i wish you guys an happy new year Are you going to add this feature?
# Configuration OAuth
OAUTH_CLIENT_ID = os.environ.get("OAUTH_CLIENT_ID")
OAUTH_CLIENT_SECRET = os.environ.get("OAUTH_CLIENT_SECRET")
OAUTH_SCOPES = os.environ.get("OAUTH_SCOPES") or "openid email profile"
OPENID_PROVIDER_URL = os.environ.get("OPENID_PROVIDER_URL") or "https://iam.services.MYCOMPANY/realms/intra/.well-known/openid-configuration"
# USER_INFO_URL = OPENID_PROVIDER_URL + "/oauth/userinfo"
# METADATA_URL = OPENID_PROVIDER_URL + "/.well-known/openid-configuration"
in another project we are using https://github.com/open-webui/open-webui with the parameter here https://docs.openwebui.com/features/sso#oidc
perhaps you could get some inspiration there?
+1 for SSO! 🚀 This is a crucial feature for us—we can't get security approval for a self-hosted solution without it.
Happy new year, everyone.
Yes! We will build this soon.
@ogabrielluiz Thanks a lot for your message. I am just wondering whether we have a timeline when we will have this feature. We will need Azure AD SSO so that we can adopt Langflow into our enterprise environment.
I read on the news today that IBM is acquiring Langflow parent DataStax. @ogabrielluiz, does this change your roadmap regarding SSO?
Could you please provide an update on whether this feature request is planned for implementation?
The feature is almost ready. See this PR: https://github.com/langflow-ai/langflow/pull/7346
+1 for SSO It would be fantastic to have SSO support in LangFlow—our org could really benefit from it. Adding version control for flows would also help us track who made changes and when. Thanks for considering!
