Feature Request: SCIM Protocol Support for Group Management and Access Control

[flefevre]

Hello Langflow team,

I’d like to know if Langflow currently supports — or plans to support — the SCIM (System for Cross-domain Identity Management) protocol for managing users and groups.

SCIM support would allow organizations to:

• Manage user and group provisioning directly from identity providers (e.g., Okta, Azure AD, Ping Identity).
• Define flow access based on group membership.
• Control API, MCP, and chatbot access consistently through centralized group management.

This would greatly simplify enterprise identity and access management (IAM) integration and make Langflow easier to deploy in larger organizations with existing identity infrastructures.

Use Case Example

• Automatically assign users to specific Langflow projects based on their group membership (e.g., “AI Researchers”, “Data Science Team”).
• Revoke access automatically when a user is removed from a group in the IdP.
• Synchronize permissions for flows, APIs, and connected chatbots.

Questions

1. Does Langflow currently have any SCIM or SSO-related roadmap?
2. If not, would the team be open to discussing possible implementation approaches or contributions?

Benefits

• Centralized identity lifecycle management
• Enhanced security and compliance
• Simplified user/group onboarding and offboarding
• Better integration with enterprise SSO systems

References

• SCIM Specification (RFC 7644)
• SCIM Overview (Okta Developer Docs)

Thank you for considering this request!