[PR #1004] [CLOSED] docs: add entra group name sync tutorial #991

New Issue

2026-02-15T18:16:54-05:00

yindo commented

2026-02-15 18:16:54 -05:00

📋 Pull Request Information

Original PR: https://github.com/open-webui/docs/pull/1004
Author: @fstau
Created: 1/14/2026
Status: ❌ Closed

Base: main ← Head: entra-group-names

📝 Commits (1)

bb26891 docs: add entra group name sync tutorial

📊 Changes

1 file changed (+209 additions, -0 deletions)

View changed files

➕ docs/tutorials/integrations/entra-group-name-sync.md (+209 -0)

📄 Description

Add tutorial: Microsoft Entra ID Group Name Sync

Summary

This PR adds a community tutorial explaining how to configure Microsoft Entra ID to return human-readable group names instead of GUIDs when using OAuth group synchronization with Open WebUI.

Background

I am working with a couple of organisations deploying Open WebUI internally that have run into issues with Microsoft Entra ID group synchronisation leading to GUIDs as Open WebUI group names when following default setup instructions. There are issues / discussions on the open-webui repository that describe troubleshooting steps and solutions. I have verified that those work to unblock my own deployments and created this writeup of the required steps to aid others trying to solve this issue via better discoverability in the docs.
This information was gathered from community discussion in open-webui/open-webui#13657.

Content

The tutorial covers:

Step-by-step configuration of App Registration token claims
Manifest modifications to enable cloud_displayname
Enterprise Application group assignment requirements
Required Open WebUI environment variables for OAuth group management
Verification steps using jwt.ms
Troubleshooting common issues (GUIDs still appearing, groups not syncing, JIT creation not working)
Example Docker Compose configuration

Documentation Standards

Includes community contribution warning
Uses terminology consistent with official docs ("Microsoft Entra ID", "Just-in-Time (JIT) group creation")
Cross-references relevant feature documentation (/features/auth/sso, /features/rbac/groups)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/docs/pull/1004 **Author:** [@fstau](https://github.com/fstau) **Created:** 1/14/2026 **Status:** ❌ Closed **Base:** `main` ← **Head:** `entra-group-names` --- ### 📝 Commits (1) - [`bb26891`](https://github.com/open-webui/docs/commit/bb26891736905b197f92a8784079f2ac48617245) docs: add entra group name sync tutorial ### 📊 Changes **1 file changed** (+209 additions, -0 deletions) <details> <summary>View changed files</summary> ➕ `docs/tutorials/integrations/entra-group-name-sync.md` (+209 -0) </details> ### 📄 Description ### Add tutorial: Microsoft Entra ID Group Name Sync **Summary** This PR adds a community tutorial explaining how to configure Microsoft Entra ID to return human-readable group names instead of GUIDs when using OAuth group synchronization with Open WebUI. **Background** I am working with a couple of organisations deploying Open WebUI internally that have run into issues with Microsoft Entra ID group synchronisation leading to GUIDs as Open WebUI group names when following default setup instructions. There are issues / discussions on the open-webui repository that describe troubleshooting steps and solutions. I have verified that those work to unblock my own deployments and created this writeup of the required steps to aid others trying to solve this issue via better discoverability in the docs. This information was gathered from community discussion in [open-webui/open-webui#13657](https://github.com/open-webui/open-webui/discussions/13657). **Content** The tutorial covers: - Step-by-step configuration of App Registration token claims - Manifest modifications to enable `cloud_displayname` - Enterprise Application group assignment requirements - Required Open WebUI environment variables for OAuth group management - Verification steps using jwt.ms - Troubleshooting common issues (GUIDs still appearing, groups not syncing, JIT creation not working) - Example Docker Compose configuration **Documentation Standards** - Includes community contribution warning - Uses terminology consistent with official docs ("Microsoft Entra ID", "Just-in-Time (JIT) group creation") - Cross-references relevant feature documentation (`/features/auth/sso`, `/features/rbac/groups`) --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

yindo added the pull-request label 2026-02-15 18:16:54 -05:00

yindo closed this issue

2026-02-15 18:16:54 -05:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: open-webui/docs#991