I have searched the existing issues and discussions.
Problem Description
Currently, Open WebUI supports user account creation during OIDC authentication but lacks support for group provisioning via SCIM (System for Cross-domain Identity Management). This absence makes it difficult for users to automate the process of creating, updating, and deleting groups within Open WebUI, especially when integrating with identity providers that support SCIM.
Desired Solution you'd like
Implement SCIM group provisioning support in Open WebUI to allow for automated group management. The desired solution should include the following features:
Group Creation: Ability to create new groups via SCIM.
Group Update: Ability to update existing groups (e.g., change group name, description, etc.).
Group Deletion: Ability to delete groups.
Group Membership Management: Support for adding and removing users to/from groups.
Schema Support: Adherence to SCIM schema standards for group attributes.
Authentication: Secure authentication mechanisms for SCIM endpoints (e.g., OAuth, API keys).
Originally created by @calebhansard on GitHub (Apr 15, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/12908
### Check Existing Issues
- [x] I have searched the existing issues and discussions.
### Problem Description
Currently, Open WebUI supports user account creation during OIDC authentication but lacks support for group provisioning via SCIM (System for Cross-domain Identity Management). This absence makes it difficult for users to automate the process of creating, updating, and deleting groups within Open WebUI, especially when integrating with identity providers that support SCIM.
### Desired Solution you'd like
Implement SCIM group provisioning support in Open WebUI to allow for automated group management. The desired solution should include the following features:
- **Group Creation:** Ability to create new groups via SCIM.
- **Group Update:** Ability to update existing groups (e.g., change group name, description, etc.).
- **Group Deletion:** Ability to delete groups.
- **Group Membership Management:** Support for adding and removing users to/from groups.
- **Schema Support:** Adherence to SCIM schema standards for group attributes.
- **Authentication:** Secure authentication mechanisms for SCIM endpoints (e.g., OAuth, API keys).
### Alternatives Considered
_No response_
### Additional Context
- **References:**
- [System for Cross-domain Identity Management](https://scim.cloud/)
- [SCIM Protocol Specification](https://datatracker.ietf.org/doc/html/rfc7644)
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @calebhansard on GitHub (Apr 15, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/12908
Check Existing Issues
Problem Description
Currently, Open WebUI supports user account creation during OIDC authentication but lacks support for group provisioning via SCIM (System for Cross-domain Identity Management). This absence makes it difficult for users to automate the process of creating, updating, and deleting groups within Open WebUI, especially when integrating with identity providers that support SCIM.
Desired Solution you'd like
Implement SCIM group provisioning support in Open WebUI to allow for automated group management. The desired solution should include the following features:
Alternatives Considered
No response
Additional Context
@calebhansard commented on GitHub (Apr 15, 2025):
Related to: https://github.com/open-webui/open-webui/issues/7102
@dieu-bis commented on GitHub (Aug 18, 2025):
added here https://github.com/open-webui/open-webui/pull/15694