Which self-hosted AI apps include SSO for free?
Short answer
8 of the 44 active apps we track document single sign-on in the free self-hosted edition: Langflow (OIDC free), Langfuse (OIDC free), LibreChat (OIDC free · SAML free · LDAP free), LobeHub (LobeChat) (OIDC free), LocalAI (OIDC free), Open WebUI (OIDC free · LDAP free), RAGFlow (OIDC free), Sim (OIDC free · SAML free).
By protocol, free OIDC: Langflow, Langfuse, LibreChat, LobeHub (LobeChat), LocalAI, Open WebUI, RAGFlow, Sim. Free SAML: LibreChat, Sim. Free LDAP: LibreChat, Open WebUI.
Free with limits: LiteLLM.
SSO only in a paid or enterprise edition: Activepieces, Dify, FastGPT, Label Studio, MaxKB, n8n, PrivateGPT, Tabby.
No SSO at all (per their docs): Chroma, InvokeAI, Open Notebook.
23 apps do not document SSO either way; we list them as "Not documented" instead of guessing. You can often still put them behind an authenticating reverse proxy, but that is not built-in SSO.
Last updated · generated from the same verified data as each app page
Comparison table
| App | SSO in self-hosted edition | Protocols (verified) | Audit log | Roles / RBAC | License |
|---|---|---|---|---|---|
| Langflow | Free | OIDC free | Yes, free | No | MIT |
| Langfuse | Free | OIDC free | Paid / enterprise only | Basic free, more in paid plan | MIT (core) + Langfuse Enterprise License (ee directories) |
| LibreChat | Free | OIDC free · SAML free · LDAP free | Not documented | Not documented | MIT |
| LobeHub (LobeChat) | Free | OIDC free | Not documented | Not documented | LobeHub Community License (Apache-2.0 with conditions) |
| LocalAI | Free | OIDC free | Not documented | Yes, free | MIT |
| Open WebUI | Free | OIDC free · LDAP free | Yes, free | Yes, free | Open WebUI License (BSD-3-Clause style with branding clause) |
| RAGFlow | Free | OIDC free | Not documented | Basic free, more in paid plan | Apache-2.0 |
| Sim | Free | OIDC free · SAML free | Yes, free | Yes, free | Apache-2.0 |
| LiteLLM | Free with limits | OIDC free with limits · SAML free with limits | Paid / enterprise only | Paid / enterprise only | MIT (core) + LiteLLM Enterprise License (enterprise directory) |
| Activepieces | Paid / enterprise only | SAML paid | Paid / enterprise only | Paid / enterprise only | MIT (core) + Activepieces Enterprise License (ee directories) |
| Dify | Paid / enterprise only | Not documented | Not documented | Basic free, more in paid plan | Dify Open Source License (modified Apache-2.0) |
| FastGPT | Paid / enterprise only | Not documented | Not documented | Paid / enterprise only | FastGPT Open Source License (Apache-2.0 with conditions) |
| Label Studio | Paid / enterprise only | OIDC paid · SAML paid · LDAP paid | Paid / enterprise only | No | Apache-2.0 |
| MaxKB | Paid / enterprise only | OIDC paid · SAML paid · LDAP paid | Paid / enterprise only | Paid / enterprise only | GPL-3.0 |
| n8n | Paid / enterprise only | OIDC paid · SAML paid · LDAP paid | Paid / enterprise only | Paid / enterprise only | Sustainable Use License (fair-code) + n8n Enterprise License for .ee files |
| PrivateGPT | Paid / enterprise only | LDAP paid | Paid / enterprise only | Paid / enterprise only | Apache-2.0 |
| Tabby | Paid / enterprise only | LDAP paid | Not documented | Not documented | Apache-2.0 (ee directory under a separate license) |
| Chroma | Not supported | OIDC not supported · SAML not supported · LDAP not supported | Not documented | No | Apache-2.0 |
| InvokeAI | Not supported | OIDC not supported | No | Yes, free | Apache-2.0 |
| Open Notebook | Not supported | OIDC not supported · SAML not supported · LDAP not supported | No | No | MIT |
From the "Data & compliance" block of each app page, which we fill only from the project's own docs, pricing page or source code, with a link for every value. "Free" means it is in the open-source or free self-hosted edition; "Paid / enterprise only" means the docs put it behind a license key or paid plan. Apps whose docs say nothing about SSO (23) are not in the table. Apps marked "Not applicable" are left out too. Check the linked source before you buy or deploy, since editions change.
Frequently asked questions
Which self-hosted AI apps support SSO for free?
8 of the 44 active apps we track document single sign-on in the free self-hosted edition: Langflow (OIDC free), Langfuse (OIDC free), LibreChat (OIDC free · SAML free · LDAP free), LobeHub (LobeChat) (OIDC free), LocalAI (OIDC free), Open WebUI (OIDC free · LDAP free), RAGFlow (OIDC free), Sim (OIDC free · SAML free).
Which self-hosted AI apps support SAML without a paid plan?
LibreChat, Sim, according to their docs.
Which AI apps put SSO behind an enterprise license?
SSO only in a paid or enterprise edition: Activepieces, Dify, FastGPT, Label Studio, MaxKB, n8n, PrivateGPT, Tabby.
Which of them also have a free audit log?
Langflow, Open WebUI, Sim.
Related
Every figure on this page comes from the linked app pages, which cite the project's own repository and docs. Spotted something wrong? Tell us.