github-starred/open-webui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-08-30 17:25:30 -05:00
Code Issues 2.4k Packages Projects Releases 129 Wiki Activity

[PR #20645] [CLOSED] feat: Add Microsoft Entra ID OAuth authentication #41346

New Issue
Closed
opened 2026-04-25 13:36:27 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-25 13:36:27 -05:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/20645
Author: @TheLukasHenry
Created: 1/13/2026
Status: ❌ Closed

Base: main ← Head: entra-setup

📝 Commits (1)

  • b6b39ba feat: Add Microsoft Entra ID OAuth authentication

📊 Changes

4 files changed (+45 additions, -3 deletions)

View changed files

📝 .env.example (+35 -1)
📝 .gitignore (+1 -0)
📝 Dockerfile (+1 -1)
📝 docker-compose.yaml (+8 -1)

📄 Description

Summary

  • Adds "Sign in with Microsoft" button to the login page
  • Supports personal Microsoft accounts (outlook.com, hotmail.com, gmail-linked accounts)
  • Includes logout redirect back to Open WebUI

Changes

  • docker-compose.yaml: Added Microsoft OAuth environment variables
  • .env.example: Documented all OAuth configuration options
  • Dockerfile: Enabled NODE_OPTIONS for build memory issues
  • .gitignore: Added .devswarm-temp/

Configuration Required

Create a .env file with:

MICROSOFT_CLIENT_ID=<from-azure-app-registration>
MICROSOFT_CLIENT_SECRET=<from-azure-secrets>
MICROSOFT_CLIENT_TENANT_ID=consumers
WEBUI_SECRET_KEY=<generate-with-openssl-rand-hex-32>
WEBUI_URL=https://ai-ui.coolestdomain.win
ENABLE_OAUTH_SIGNUP=true
OPENID_PROVIDER_URL=https://login.microsoftonline.com/consumers/v2.0/.well-known/openid-configuration
WEBUI_AUTH_SIGNOUT_REDIRECT_URL=https://ai-ui.coolestdomain.win/auth

Azure App Registration Setup

  1. Create app in Azure Portal > App registrations
  2. Set "Supported account types" to include personal Microsoft accounts
  3. Add redirect URIs:
    • https://ai-ui.coolestdomain.win/oauth/microsoft/callback
    • https://ai-ui.coolestdomain.win/auth
  4. Create a client secret

Test plan

  • Login with Microsoft works on localhost
  • Logout redirects back to login page
  • Login works on production (ai-ui.coolestdomain.win)

🤖 Generated with Claude Code

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/20645 **Author:** [@TheLukasHenry](https://github.com/TheLukasHenry) **Created:** 1/13/2026 **Status:** ❌ Closed **Base:** `main` ← **Head:** `entra-setup` --- ### 📝 Commits (1) - [`b6b39ba`](https://github.com/open-webui/open-webui/commit/b6b39baf0522c6ee3785792b88898abc02393509) feat: Add Microsoft Entra ID OAuth authentication ### 📊 Changes **4 files changed** (+45 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `.env.example` (+35 -1) 📝 `.gitignore` (+1 -0) 📝 `Dockerfile` (+1 -1) 📝 `docker-compose.yaml` (+8 -1) </details> ### 📄 Description ## Summary - Adds "Sign in with Microsoft" button to the login page - Supports personal Microsoft accounts (outlook.com, hotmail.com, gmail-linked accounts) - Includes logout redirect back to Open WebUI ## Changes - **docker-compose.yaml**: Added Microsoft OAuth environment variables - **.env.example**: Documented all OAuth configuration options - **Dockerfile**: Enabled NODE_OPTIONS for build memory issues - **.gitignore**: Added .devswarm-temp/ ## Configuration Required Create a `.env` file with: ```bash MICROSOFT_CLIENT_ID=<from-azure-app-registration> MICROSOFT_CLIENT_SECRET=<from-azure-secrets> MICROSOFT_CLIENT_TENANT_ID=consumers WEBUI_SECRET_KEY=<generate-with-openssl-rand-hex-32> WEBUI_URL=https://ai-ui.coolestdomain.win ENABLE_OAUTH_SIGNUP=true OPENID_PROVIDER_URL=https://login.microsoftonline.com/consumers/v2.0/.well-known/openid-configuration WEBUI_AUTH_SIGNOUT_REDIRECT_URL=https://ai-ui.coolestdomain.win/auth ``` ## Azure App Registration Setup 1. Create app in Azure Portal > App registrations 2. Set "Supported account types" to include personal Microsoft accounts 3. Add redirect URIs: - `https://ai-ui.coolestdomain.win/oauth/microsoft/callback` - `https://ai-ui.coolestdomain.win/auth` 4. Create a client secret ## Test plan - [x] Login with Microsoft works on localhost - [x] Logout redirects back to login page - [ ] Login works on production (ai-ui.coolestdomain.win) 🤖 Generated with [Claude Code](https://claude.com/claude-code) --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-25 13:36:27 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
confirmed issue
core
documentation
enhancement
good first issue
help wanted
non-core
pull-request
Mirrored from GitHub Pull Request
 python
question
testing wanted
No labels pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
GiteaMirror ninjasurge (Kaehlen Rog)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#41346