# \#sso **URL:** https://community.temporal.io/tag/sso/165.md [Latest](https://community.temporal.io/latest.md) · [Categories](https://community.temporal.io/categories.md) · [Tags](https://community.temporal.io/tags.md) --- ## [Temporal Role based access control(RBAC) issue/limitation](https://community.temporal.io/t/temporal-role-based-access-control-rbac-issue-limitation/19756)
**Author:** [@kishore\_kumar](https://community.temporal.io/u/kishore_kumar)\ **Replies:** 2\ **Last updated:** [August 26, 2026, 5:17am UTC](https://community.temporal.io/t/temporal-role-based-access-control-rbac-issue-limitation/19756 "2026-08-26T05:17:46Z")
Hey, we have a question about self-hosted RBAC (Authorizer + ClaimMapper, Temporal server 1.22.0, SSO via Auth0). We have namespaceA and namespaceB. We granted a user permission for namespaceA:read only. With just that… --- ## [Workflow start information for auditing: who started this workflow?](https://community.temporal.io/t/workflow-start-information-for-auditing-who-started-this-workflow/18383)
**Author:** [@Ingmar](https://community.temporal.io/u/Ingmar)\ **Replies:** 2\ **Last updated:** [August 13, 2026, 3:54pm UTC](https://community.temporal.io/t/workflow-start-information-for-auditing-who-started-this-workflow/18383 "2026-08-13T15:54:48Z")
Is there some information stored somewhere about who started a workflow? The workflows started by our services seem indistinguishable from workflows started from the web UI by users (at least we can’t find any informatio… --- ## [Problem configuring SSO with keycloak](https://community.temporal.io/t/problem-configuring-sso-with-keycloak/11640)
**Author:** [@renatovieira.altbank](https://community.temporal.io/u/renatovieira.altbank)\ **Replies:** 9\ **Last updated:** [November 6, 2025, 1:22am UTC](https://community.temporal.io/t/problem-configuring-sso-with-keycloak/11640 "2025-11-06T01:22:41Z")
I’m configuring my web authentication with keycloak and I’m getting the error below in pod temporal-web: 2024/04/05 23:08:59 Loading config; env=docker,configDir=config 2024/04/05 23:08:59 Loading config files=\[config/d… --- ## [Web UI User Authorization](https://community.temporal.io/t/web-ui-user-authorization/18523)
**Author:** [@Galo](https://community.temporal.io/u/Galo)\ **Replies:** 2\ **Last updated:** [October 29, 2025, 10:39pm UTC](https://community.temporal.io/t/web-ui-user-authorization/18523 "2025-10-29T22:39:49Z")
We’re self-hosting Temporal and have integrated it with our SSO provider via OIDC. Authentication works well; Users can log in through our identity provider and reach the Temporal UI. Our question is about authorization… --- ## [Issues with configuring SSO on the web application](https://community.temporal.io/t/issues-with-configuring-sso-on-the-web-application/18344)
**Author:** [@Sergey\_Reutov](https://community.temporal.io/u/Sergey_Reutov)\ **Replies:** 1\ **Last updated:** [September 18, 2025, 2:50am UTC](https://community.temporal.io/t/issues-with-configuring-sso-on-the-web-application/18344 "2025-09-18T02:50:30Z")
Greetings to all. We deployed the Temporal service using the official Helm Chart. Our company uses SSO based on the Authentik service. In Values, I pass the following parameters: additionalEnv: - name: TEMPORAL\_AUTH… --- ## [How to configure SSO with GitHub](https://community.temporal.io/t/how-to-configure-sso-with-github/15439)
**Author:** [@tired-devops](https://community.temporal.io/u/tired-devops)\ **Replies:** 1\ **Last updated:** [December 10, 2024, 9:14am UTC](https://community.temporal.io/t/how-to-configure-sso-with-github/15439 "2024-12-10T09:14:59Z")
I have temporal deployed via the official helm chart (version 0.51.0). I’m trying to enable SSO via GitHub OAuth App on the web UI. Here’s the relevant part of my values.yaml web: ingress: enabled: true clas… --- ## [Docker Compose with SSO Unable to create namespace default: Request Unauthorized](https://community.temporal.io/t/docker-compose-with-sso-unable-to-create-namespace-default-request-unauthorized/13156)
**Author:** [@OhMyDeera](https://community.temporal.io/u/OhMyDeera)\ **Replies:** 1\ **Last updated:** [December 6, 2024, 10:16pm UTC](https://community.temporal.io/t/docker-compose-with-sso-unable-to-create-namespace-default-request-unauthorized/13156 "2024-12-06T22:16:51Z")
Afternoon! I have been trying to deploy the temporal server, ui and admin tools locally using docker compose and all seems to have been fine until I enabled SSO. Starting up the server now results in the following erro… --- ## [UI SSO Not working with Azure AD](https://community.temporal.io/t/ui-sso-not-working-with-azure-ad/12494)
**Author:** [@moonman](https://community.temporal.io/u/moonman)\ **Replies:** 1\ **Last updated:** [December 4, 2024, 7:15pm UTC](https://community.temporal.io/t/ui-sso-not-working-with-azure-ad/12494 "2024-12-04T19:15:51Z")
I’ve tried solutions from ‘kapa.ai’ and this community post, however it’s still not working. If I follow both replies and use login.microsoft.com I get: {"message":"Unable to verify ID Token: oidc: id token issued by a… --- ## [Temporal Helm Chart RBAC](https://community.temporal.io/t/temporal-helm-chart-rbac/12911)
**Author:** [@royalsaini](https://community.temporal.io/u/royalsaini)\ **Replies:** 0\ **Last updated:** [July 22, 2024, 2:00pm UTC](https://community.temporal.io/t/temporal-helm-chart-rbac/12911 "2024-07-22T14:00:19Z")
Hello, Ive been having trouble integrating RBAC in to Temporal Helm chats using MS Entra. I have been able to get SSO working and I deploy temporal via rancher locally. Ive seen some posts/ guides use frontend-internal,… --- ## [Web UI SSO with Azure AD - not working](https://community.temporal.io/t/web-ui-sso-with-azure-ad-not-working/7213)
**Author:** [@sstro](https://community.temporal.io/u/sstro)\ **Replies:** 6\ **Last updated:** [May 16, 2024, 3:18pm UTC](https://community.temporal.io/t/web-ui-sso-with-azure-ad-not-working/7213 "2024-05-16T15:18:33Z")
Hello, Trying to set up Web UI SSO with Azure AD, but having an issue integrating with the Temporal backend. All Temporal components are deployed with the Helm chart. The UI is accessed from the localhost via kubectl p… --- ## [Not able to integrate sso with new temporal ui](https://community.temporal.io/t/not-able-to-integrate-sso-with-new-temporal-ui/5279)
**Author:** [@madhu](https://community.temporal.io/u/madhu)\ **Replies:** 26\ **Last updated:** [June 22, 2023, 1:44pm UTC](https://community.temporal.io/t/not-able-to-integrate-sso-with-new-temporal-ui/5279 "2023-06-22T13:44:38Z")
Hi, since the auth section / config map (helm) has been removed from the new UI, I added the following environment varaibles to my deployment . - TEMPORAL\_ADDRESS=temporal:7233 - TEMPORAL\_CORS\_ORIGINS=htt…