Disable the default login #37

Closed
opened 2026-02-15 17:05:21 -05:00 by yindo · 5 comments
Owner

Originally created by @satendrakumar on GitHub (Aug 26, 2024).

I integrated the OIDC with Open-webui using DeScope. It is working but the default login is still there.
I used to ENV param ENABLE_LOGIN_FORM=false but does not help.

image

Here are all the params:

ENABLE_OAUTH_SIGNUP=true
ENABLE_LOGIN_FORM=false 
ENABLE_SIGNUP=false 
OAUTH_MERGE_ACCOUNTS_BY_EMAIL=true

here is the docker command with OIDC:

docker run -d -p 3000:8080 --add-host=host.docker.internal:host-gateway -v ~/.open-webui:/app/backend/data --name open-webui -e ENABLE_OAUTH_SIGNUP=true -e ENABLE_LOGIN_FORM=false -e ENABLE_SIGNUP=false -e OAUTH_MERGE_ACCOUNTS_BY_EMAIL=true -e OAUTH_USERNAME_CLAIM=name  -e OAUTH_CLIENT_ID=XXXXXXXXXX -e OAUTH_CLIENT_SECRET=XXXXXXXXXXXXXXXXXX -e OPENID_PROVIDER_URL=https://api.descope.com/XXXXXXXXXXXXXX/.well-known/openid-configuration -e OAUTH_PROVIDER_NAME=DeScope  --restart always ghcr.io/open-webui/open-webui:main

I am try to disable the default login and auto redirect to OIDC. Any help would be much appreciated. Thank you.

Originally created by @satendrakumar on GitHub (Aug 26, 2024). I integrated the OIDC with Open-webui using [DeScope](https://www.descope.com). It is working but the default login is still there. I used to ENV param `ENABLE_LOGIN_FORM=false` but does not help. <img width="994" alt="image" src="https://github.com/user-attachments/assets/923f7f30-ddc0-4e14-a3a9-67fa9ab6feae"> Here are all the params: ``` ENABLE_OAUTH_SIGNUP=true ENABLE_LOGIN_FORM=false ENABLE_SIGNUP=false OAUTH_MERGE_ACCOUNTS_BY_EMAIL=true ``` here is the docker command with OIDC: ```shell docker run -d -p 3000:8080 --add-host=host.docker.internal:host-gateway -v ~/.open-webui:/app/backend/data --name open-webui -e ENABLE_OAUTH_SIGNUP=true -e ENABLE_LOGIN_FORM=false -e ENABLE_SIGNUP=false -e OAUTH_MERGE_ACCOUNTS_BY_EMAIL=true -e OAUTH_USERNAME_CLAIM=name -e OAUTH_CLIENT_ID=XXXXXXXXXX -e OAUTH_CLIENT_SECRET=XXXXXXXXXXXXXXXXXX -e OPENID_PROVIDER_URL=https://api.descope.com/XXXXXXXXXXXXXX/.well-known/openid-configuration -e OAUTH_PROVIDER_NAME=DeScope --restart always ghcr.io/open-webui/open-webui:main ``` I am try to disable the default login and auto redirect to OIDC. Any help would be much appreciated. Thank you.
yindo closed this issue 2026-02-15 17:05:21 -05:00
Author
Owner

@queentrapwatchout commented on GitHub (Aug 29, 2024):

Just tried this out of curiosity on my own deployment that uses Microsoft OAuth and it doesn't work for me either.

@queentrapwatchout commented on GitHub (Aug 29, 2024): Just tried this out of curiosity on my own deployment that uses Microsoft OAuth and it doesn't work for me either.
Author
Owner

@dimakovalenko-united-ctm commented on GitHub (Dec 10, 2024):

Any update on this ticket? I'm looking to productionalize a service and hoping to get rid of the glaring security issues from the start

@dimakovalenko-united-ctm commented on GitHub (Dec 10, 2024): Any update on this ticket? I'm looking to productionalize a service and hoping to get rid of the glaring security issues from the start
Author
Owner

@dimakovalenko-united-ctm commented on GitHub (Dec 16, 2024):

This appears to be fixed in 0.4.8

@dimakovalenko-united-ctm commented on GitHub (Dec 16, 2024): This appears to be fixed in 0.4.8
Author
Owner

@onlynow2 commented on GitHub (Mar 24, 2025):

This appears to be fixed in 0.4.8

Also worked for me in version 0.5.20 by setting the following environment variables:

ENABLE_LOGIN_FORM=false
ENABLE_SIGNUP=false
@onlynow2 commented on GitHub (Mar 24, 2025): > This appears to be fixed in 0.4.8 Also worked for me in version 0.5.20 by setting the following environment variables: ``` ENABLE_LOGIN_FORM=false ENABLE_SIGNUP=false ```
Author
Owner

@johnweland commented on GitHub (Apr 19, 2025):

anyway to make is auto redirect to your oidc provider in my case authentic? so if your not logged in it immediately bounces you to the login instead of having you click the button?

@johnweland commented on GitHub (Apr 19, 2025): anyway to make is auto redirect to your oidc provider in my case authentic? so if your not logged in it immediately bounces you to the login instead of having you click the button?
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: open-webui/docs#37