mirror of
https://github.com/open-webui/docs
synced 2025-05-19 18:58:41 +00:00
Update sso.md
This commit is contained in:
parent
6a23132cd5
commit
468fe57865
@ -75,6 +75,24 @@ If changing the role of a logged in user, they will need to log out and log back
|
||||
|
||||
:::
|
||||
|
||||
### OAuth Group Management
|
||||
|
||||
Any OAuth provider that can be configured to return groups in the access token can be used to manage user groups in Open WebUI.
|
||||
To use this feature set `ENABLE_OAUTH_GROUP_MANAGEMENT` to `true`.
|
||||
You can configure the following environment variables to match the groups returned by the OAuth provider:
|
||||
|
||||
1. `OAUTH_GROUP_CLAIM` - The claim that contains the groups. Defaults to `groups`. Can also be nested, for example `user.memberOf`.
|
||||
|
||||
:::warning
|
||||
Admin users do not get their groups updated
|
||||
:::
|
||||
|
||||
:::info
|
||||
|
||||
If changing the group of a logged in user, they will need to log out and log back in to receive the new group.
|
||||
|
||||
:::
|
||||
|
||||
## Trusted Header
|
||||
|
||||
Open WebUI is able to delegate authentication to an authenticating reverse proxy that passes in the user's details in HTTP headers.
|
||||
|
Loading…
Reference in New Issue
Block a user