mirror of
https://github.com/open-webui/open-webui.git
synced 2026-08-24 14:23:59 -05:00
feat: Support Microsoft Oauth Group Names #5078
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/open-webui#5078
Reference in New Issue
Block a user
Originally created by @erictmnz on GitHub (May 7, 2025).
Check Existing Issues
Problem Description
Currently we are able to import the Microsoft user's security groups.
However, in Open WebUI it only shows the id of the group.
This is a Microsoft limitation (ie the token doesn't supply the name).
Desired Solution you'd like
It would be great if the "name" of the groups in Open WebUI would be separate from the "id".
This would allow us to manually rename the groups once they are imported without this creating additional groups when the user logs in again.
It's a bit of a workaround but it would allow Microsoft Oauth identity users to make use of the groups feature and use the share with group etc.
Alternatives Considered
No response
Additional Context
No response
@Dudedrakes commented on GitHub (May 7, 2025):
Entra can return the group names, but it has to be manually configured in the App Registration manifest.
First, in the token configuration, make sure groups are added as an option claim.
Then go to the manifest and in the additionalProperties section of the optional claims add "cloud_displayname" for each of the groups claims as shown in this image below. The token will then have could names instead of ID's