Skip to content

Conversation

@leondape
Copy link
Contributor

@leondape leondape commented Oct 7, 2025

Add comprehensive documentation for the new OIDC group sync feature:

  • Overview and prerequisites
  • Configuration examples for realm roles, client roles, and groups
  • Step-by-step setup instructions
  • Troubleshooting guide with common claim paths
  • Usage examples for permissions
  • Limitations and best practices

Covers integration with LibreChat's granular permissions system for agents, prompts, files, and conversations.

Related to LibreChat PR and issue danny-avila/LibreChat#10006

Add comprehensive documentation for the new OIDC group sync feature:
- Overview and prerequisites
- Configuration examples for realm roles, client roles, and groups
- Step-by-step setup instructions
- Troubleshooting guide with common claim paths
- Usage examples for permissions
- Limitations and best practices

Covers integration with LibreChat's granular permissions system
for agents, prompts, files, and conversations.

Related to LibreChat PR and issue #10006
@vercel
Copy link

vercel bot commented Oct 7, 2025

@leondape is attempting to deploy a commit to the LibreChat's projects Team on Vercel.

A member of the Team first needs to authorize it.

Document OPENID_GROUPS_EXCLUDE_PATTERN configuration option:
- Explain exact match (case-insensitive) and regex pattern support
- Provide common Keycloak exclusion examples
- Show why to exclude system roles, default roles, and auth roles
- Add practical scenario with admin/developers vs system roles
- Include configuration examples for filtering out:
  - offline_access, uma_authorization (system roles)
  - default-roles-* (default realm roles)
  - manage-account, view-profile (account management)

Complements the group sync feature by allowing fine-grained control
over which roles become groups in LibreChat.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant