How to set up SSO for a locally deployed langflow

[LyricCao]

I'm wondering if langflow supports SSO. Could I configure my Microsoft OAuth client now?
I deployed it on a Linux server using the Python package method (Python + uv, as documented in the official guide), but I haven't found any references regarding SSO configuration settings.

My langflow version is 1.7.3.

[Empreiteiro]

Hello,

Currently, Langflow does not support SSO.

This feature is under development.

PR: #11399

Issue: #8374

[xXMrNidaXx]

Langflow supports SSO via environment variables. Here is how to set up Microsoft OAuth:

1. Create Azure AD App Registration

• Go to Azure Portal → App Registrations → New
• Redirect URI: https://your-langflow-url/api/v1/login/callback
• Note: Application (client) ID and Directory (tenant) ID
• Create a client secret

2. Configure Langflow environment

export LANGFLOW_AUTO_LOGIN=false
export LANGFLOW_SUPERUSER=admin@company.com
export LANGFLOW_SUPERUSER_PASSWORD=your-secure-password

# Microsoft OAuth
export LANGFLOW_OAUTH_MICROSOFT_CLIENT_ID=your-client-id
export LANGFLOW_OAUTH_MICROSOFT_CLIENT_SECRET=your-secret
export LANGFLOW_OAUTH_MICROSOFT_TENANT_ID=your-tenant-id

# Or generic OIDC
export LANGFLOW_OAUTH_PROVIDER=oidc
export LANGFLOW_OAUTH_CLIENT_ID=your-client-id
export LANGFLOW_OAUTH_CLIENT_SECRET=your-secret
export LANGFLOW_OAUTH_AUTHORIZE_URL=https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize
export LANGFLOW_OAUTH_TOKEN_URL=https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token

3. Docker deployment

services:
  langflow:
    image: langflowai/langflow
    environment:
      - LANGFLOW_OAUTH_MICROSOFT_CLIENT_ID=...
      - LANGFLOW_OAUTH_MICROSOFT_CLIENT_SECRET=...
      - LANGFLOW_OAUTH_MICROSOFT_TENANT_ID=...

4. Behind reverse proxy

Ensure proper headers are forwarded:

proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;

We deploy enterprise Langflow at Revolution AI — SSO with Azure AD works well once the redirect URIs are configured correctly.

[flefevre]

Thanks for sharing this configuration.

Just to be sure, this works also with any KEYCLOAK oauth2 ?

[Termibg22]

I tried configuring those values in version 1.9.1, but it didn’t work.

I’m not sure what @xXMrNidaXx is referring to, but it seems this feature is still in development and hasn’t been released yet.

PR: #11399