[GH-ISSUE #12908] feat: Add SCIM Group Provisioning Support to Open WebUI #16753

Closed
opened 2026-04-19 22:36:25 -05:00 by GiteaMirror · 2 comments
Owner

Originally created by @calebhansard on GitHub (Apr 15, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/12908

Check Existing Issues

  • I have searched the existing issues and discussions.

Problem Description

Currently, Open WebUI supports user account creation during OIDC authentication but lacks support for group provisioning via SCIM (System for Cross-domain Identity Management). This absence makes it difficult for users to automate the process of creating, updating, and deleting groups within Open WebUI, especially when integrating with identity providers that support SCIM.

Desired Solution you'd like

Implement SCIM group provisioning support in Open WebUI to allow for automated group management. The desired solution should include the following features:

  • Group Creation: Ability to create new groups via SCIM.
  • Group Update: Ability to update existing groups (e.g., change group name, description, etc.).
  • Group Deletion: Ability to delete groups.
  • Group Membership Management: Support for adding and removing users to/from groups.
  • Schema Support: Adherence to SCIM schema standards for group attributes.
  • Authentication: Secure authentication mechanisms for SCIM endpoints (e.g., OAuth, API keys).

Alternatives Considered

No response

Additional Context

Originally created by @calebhansard on GitHub (Apr 15, 2025). Original GitHub issue: https://github.com/open-webui/open-webui/issues/12908 ### Check Existing Issues - [x] I have searched the existing issues and discussions. ### Problem Description Currently, Open WebUI supports user account creation during OIDC authentication but lacks support for group provisioning via SCIM (System for Cross-domain Identity Management). This absence makes it difficult for users to automate the process of creating, updating, and deleting groups within Open WebUI, especially when integrating with identity providers that support SCIM. ### Desired Solution you'd like Implement SCIM group provisioning support in Open WebUI to allow for automated group management. The desired solution should include the following features: - **Group Creation:** Ability to create new groups via SCIM. - **Group Update:** Ability to update existing groups (e.g., change group name, description, etc.). - **Group Deletion:** Ability to delete groups. - **Group Membership Management:** Support for adding and removing users to/from groups. - **Schema Support:** Adherence to SCIM schema standards for group attributes. - **Authentication:** Secure authentication mechanisms for SCIM endpoints (e.g., OAuth, API keys). ### Alternatives Considered _No response_ ### Additional Context - **References:** - [System for Cross-domain Identity Management](https://scim.cloud/) - [SCIM Protocol Specification](https://datatracker.ietf.org/doc/html/rfc7644)
Author
Owner

@calebhansard commented on GitHub (Apr 15, 2025):

Related to: https://github.com/open-webui/open-webui/issues/7102

<!-- gh-comment-id:2807411060 --> @calebhansard commented on GitHub (Apr 15, 2025): Related to: https://github.com/open-webui/open-webui/issues/7102
Author
Owner

@dieu-bis commented on GitHub (Aug 18, 2025):

added here https://github.com/open-webui/open-webui/pull/15694

<!-- gh-comment-id:3195804163 --> @dieu-bis commented on GitHub (Aug 18, 2025): added here https://github.com/open-webui/open-webui/pull/15694
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#16753