Self Hosting
SSO
SSO Setup for LangWatch
Single Sign-On (SSO)
LangWatch supports sign-in via various SSO providers. There are two ways to set up SSO:1. Self-Hosted Deployment:
We’ve set up the following providers for you.If you’d prefer a different provider, feel free to reach out to us at [email protected]. For a complete list of possible supported providers, please refer to the NextAuth.js documentation.
Azure AD/Entra ID
📄NextAuth Azure AD Provider Docs| Configuration | Value |
|---|---|
| Required Variables | AZURE_AD_CLIENT_IDAZURE_AD_CLIENT_SECRETAZURE_AD_TENANT_ID |
| OAuth Redirect URL | /api/auth/callback/azure-ad |
NEXTAUTH_PROVIDER to azure-ad in your .env file.
Okta
📄 Okta Docs| Configuration | Value |
|---|---|
| Required Variables | OKTA_CLIENT_IDOKTA_CLIENT_SECRETOKTA_ISSUER |
| OAuth Redirect URL | /api/auth/callback/okta |
NEXTAUTH_PROVIDER to okta in your .env file.
Auth0
📄 NextAuth Auth0 Provider Docs| Configuration | Value |
|---|---|
| Required Variables | AUTH0_CLIENT_IDAUTH0_CLIENT_SECRETAUTH0_ISSUER |
| OAuth Redirect URL | /api/auth/callback/auth0 |
NEXTAUTH_PROVIDER to auth0 in your .env file.
AWS Cognito
📄 NextAuth Cognito Provider Docs| Configuration | Value |
|---|---|
| Required ENV Variables | AUTH_COGNITO_CLIENT_IDAUTH_COGNITO_ISSUERCOGNITO_CLIENT_SECRET |
| OAuth Redirect URL | /api/auth/callback/cognito |
NEXTAUTH_PROVIDER to cognito in your .env file.
| Configuration | Value |
|---|---|
| Required Variables | AUTH_GOOGLE_CLIENT_IDAUTH_GOOGLE_CLIENT_SECRET |
| OAuth Redirect URL | /api/auth/callback/google |
NEXTAUTH_PROVIDER to google in your .env file.
GitHub
📄 NextAuth GitHub Provider Docs| Configuration | Value |
|---|---|
| Required ENV Variables | AUTH_GITHUB_CLIENT_IDAUTH_GITHUB_CLIENT_SECRET |
| OAuth Redirect URL | /api/auth/callback/github |
NEXTAUTH_PROVIDER to github in your .env file.
GitLab
📄 NextAuth GitLab Provider Docs| Configuration | Value |
|---|---|
| Required ENV Variables | AUTH_GITLAB_CLIENT_IDAUTH_GITLAB_CLIENT_SECRET |
| Optional Variables | AUTH_GITLAB_ISSUERAUTH_GITLAB_URL (For custom GitLab instances different from gitlab.com) |
| OAuth Redirect URL | /api/auth/callback/gitlab |
NEXTAUTH_PROVIDER to gitlab in your .env file.
2. Managed Service (app.langwatch.ai)
To use SSO with LangWatch SaaS, you can use the following providers:Azure AD / Entra ID
📄 Azure AD Docs| Configuration | Value |
|---|---|
| Required Variables | AUTH_AZURE_AD_CLIENT_IDAUTH_AZURE_AD_CLIENT_SECRETAUTH_AZURE_AD_TENANT_ID |
| Redirect URL | https://langwatch.eu.auth0.com/login/callback |
Google Workspace
📄 Google Docs| Configuration | Value |
|---|---|
| Required Variables | AUTH_GOOGLE_CLIENT_IDAUTH_GOOGLE_CLIENT_SECRET |
| Redirect URL | https://langwatch.eu.auth0.com/login/callback |
Azure AD / Entra ID
📄 Azure AD Docs| Configuration | Value |
|---|---|
| Required Variables | AUTH_AZURE_AD_CLIENT_IDAUTH_AZURE_AD_CLIENT_SECRETAUTH_AZURE_AD_TENANT_ID |
| Redirect URL | https://langwatch.eu.auth0.com/login/callback |
Okta
📄 Okta Docs| Configuration | Value |
|---|---|
| Required Variables | AUTH_OKTA_CLIENT_IDAUTH_OKTA_CLIENT_SECRETAUTH_OKTA_ISSUER |
| Redirect URL | https://langwatch.eu.auth0.com/login/callback |
Contact Us
Once you have all these details, please contact us so we can set them up from our side.Support
For any queries or issues, feel free to reach out to us. We are available via:- Email: [email protected]
- Slack: Connect with us directly on Slack for real-time support and assistance.
We look forward to helping you set up LangWatch seamlessly and efficiently.