github-starred/open-webui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-05-06 10:58:17 -05:00
Code Issues 1.2k Packages Projects Releases 126 Wiki Activity

[GH-ISSUE #11956] issue: SSO Integration with HTTP Header Variables not working #16414

New Issue
Closed
opened 2026-04-19 22:20:44 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-19 22:20:44 -05:00
Owner
Copy Link

Originally created by @codespg on GitHub (Mar 22, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/11956

Check Existing Issues

  • I have searched the existing issues and discussions.
  • I am using the latest version of Open WebUI.

Installation Method

Docker

Open WebUI Version

v0.5.18

Ollama Version (if applicable)

No response

Operating System

Ubuntu 22

Browser (if applicable)

Chrome

Confirmation

  • I have read and followed all instructions in README.md.
  • I am using the latest version of both Open WebUI and Ollama.
  • I have included the browser console logs.
  • I have included the Docker container logs.
  • I have listed steps to reproduce the bug in detail.

Expected Behavior

I have Setup Reverse proxy for Open Web UI and Normal Login works fine.
Added below parameters for HTTP Header Authentication for SSO Setup

-e ENABLE_LOGIN_FORM:False
-e WEBUI_AUTH_TRUSTED_EMAIL_HEADER:X-Remote-User
-e WEBUI_AUTH_TRUSTED_NAME_HEADER:X-First-Name

Expecting below beheaviour:

  1. On opening Open Web UI URL, Identifies WEBUI_AUTH_TRUSTED_EMAIL_HEADER and Login if the email user already present
  2. If User does not present or Valid Email not found in WEBUI_AUTH_TRUSTED_EMAIL_HEADER, Error as User not found/Invalid user.

Actual Behavior

  1. Login page shows up
  2. No Option to choose SSO

Steps to Reproduce

Run docker with below env variables
docker run -d -e OAUTH_MERGE_ACCOUNTS_BY_EMAIL:True -e WEBUI_SESSION_COOKIE_SAME_SITE:lax -e WEBUI_AUTH_COOKIE_SAME_SITE:lax -e ENABLE_LOGIN_FORM:False -e WEBUI_AUTH_TRUSTED_EMAIL_HEADER:X-Remote-User -e WEBUI_AUTH_TRUSTED_NAME_HEADER:X-First-Name -p 3000:8080 -v open-webui:/app/backend/data --name open-webui ghcr.io/open-webui/open-webui:main

Logs & Screenshots

browser_console_log.log

Additional Information

browser_har_file.har.zip

Originally created by @codespg on GitHub (Mar 22, 2025). Original GitHub issue: https://github.com/open-webui/open-webui/issues/11956 ### Check Existing Issues - [x] I have searched the existing issues and discussions. - [x] I am using the latest version of Open WebUI. ### Installation Method Docker ### Open WebUI Version v0.5.18 ### Ollama Version (if applicable) _No response_ ### Operating System Ubuntu 22 ### Browser (if applicable) Chrome ### Confirmation - [x] I have read and followed all instructions in `README.md`. - [x] I am using the latest version of **both** Open WebUI and Ollama. - [x] I have included the browser console logs. - [x] I have included the Docker container logs. - [x] I have listed steps to reproduce the bug in detail. ### Expected Behavior I have Setup Reverse proxy for Open Web UI and Normal Login works fine. Added below parameters for HTTP Header Authentication for SSO Setup -e ENABLE_LOGIN_FORM:False -e WEBUI_AUTH_TRUSTED_EMAIL_HEADER:X-Remote-User -e WEBUI_AUTH_TRUSTED_NAME_HEADER:X-First-Name Expecting below beheaviour: 1. On opening Open Web UI URL, Identifies WEBUI_AUTH_TRUSTED_EMAIL_HEADER and Login if the email user already present 2. If User does not present or Valid Email not found in WEBUI_AUTH_TRUSTED_EMAIL_HEADER, Error as User not found/Invalid user. ### Actual Behavior 1. Login page shows up 2. No Option to choose SSO ### Steps to Reproduce Run docker with below env variables docker run -d -e OAUTH_MERGE_ACCOUNTS_BY_EMAIL:True -e WEBUI_SESSION_COOKIE_SAME_SITE:lax -e WEBUI_AUTH_COOKIE_SAME_SITE:lax -e ENABLE_LOGIN_FORM:False -e WEBUI_AUTH_TRUSTED_EMAIL_HEADER:X-Remote-User -e WEBUI_AUTH_TRUSTED_NAME_HEADER:X-First-Name -p 3000:8080 -v open-webui:/app/backend/data --name open-webui ghcr.io/open-webui/open-webui:main ### Logs & Screenshots [browser_console_log.log](https://github.com/user-attachments/files/19404144/browser_console_log.log) ### Additional Information [browser_har_file.har.zip](https://github.com/user-attachments/files/19404147/browser_har_file.har.zip)
GiteaMirror added the bug label 2026-04-19 22:20:44 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
confirmed issue
core
documentation
enhancement
good first issue
help wanted
non-core
pull-request
Mirrored from GitHub Pull Request
 python
question
testing wanted
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#16414
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?