[Enhancement]: SAML Login Support

[tsutsu3]

What features would you like to see added?

We would like to see support for SAML-based authentication in the system.

This would allow users to authenticate using existing SAML-based Identity Providers (IDPs) such as Google Workspace (GWS), Okta, Azure AD, etc., enabling seamless and secure single sign-on (SSO).

More details

Use Case:

• Enable users to authenticate using their existing SAML-based IDP.
• In my environment, OIDC cannot be used, and only SAML authentication is possible.

Which components are impacted by your request?

General

Pictures

No response

Code of Conduct

• I agree to follow this project's Code of Conduct

[rubentalstra]

could be an idea.
but I don't have a setup to test this with 😅.
https://github.com/node-saml/passport-saml

[tsutsu3]

I implemented SAML authentication using passport-saml with Auth0 as the IdP (implementation here).

The login process worked without any issues.

[rubentalstra]

LGTM! one small thing. could you please make it so that you can only setup OIDC or SAML because now it will conflict.

[tsutsu3]

Do you mean that SAML and OpenID should not be displayed at the same time, like in this image? Should the application throw an error on startup if both are configured?

Also, I’ve updated the database to store samlId instead of openidId when using SAML.

[rubentalstra]

no that you can only setup OpenID or SAML also in the backend api

[tsutsu3]

Is this what you meant?
tsutsu3@4723561

[tsutsu3]

Add doc example: tsutsu3/librechat.ai#1

[rubentalstra]

@tsutsu3 please create a PR here so I can review it better.

[tsutsu3]

See #6169