Langfuse now supports IdP-initiated SSO, allowing users to start authentication directly from their identity provider (e.g., Okta, Azure AD, Keycloak, JumpCloud). This enables a seamless authentication experience where users can click on the Langfuse application tile in their identity provider's dashboard and be automatically authenticated.
How It Works: When configuring IdP-initiated SSO, you set up your identity provider to redirect users to <YOUR_LANGFUSE_INSTANCE_URL>/auth/sso-initiate?provider=<PROVIDER>. Langfuse automatically detects the provider and initiates the SSO authentication flow.
Getting Started: On Langfuse Cloud, contact support to configure IdP-initiated SSO. When self-hosting, see the SSO documentation for configuration instructions. IdP-initiated SSO is available on version >=v3.126.0 of Langfuse.
Fetched April 13, 2026