Skip to main content

Email/password a.k.a. basic auth (beta)

LangSmith supports login via username/password with a few limitations during the beta period:

  • You cannot change an existing installation from basic auth mode other auth modes (OIDC or no auth) or vice versa - installations must be either one or the other. A basic auth installation requires a completely fresh installation including a separate PostgreSQL database/schema.
  • Users must be given their initial auto-generated password once they are invited. This password may be changed later by any Organization Admin.

Requirements and features​

  • There is a single Default organization that is provisioned during initial installation, and creating additional organizations is not supported
  • Your initial password (configured below) must be least 12 characters long and have at least one lowercase, uppercase, and symbol
  • There are no strict requirements for the secret used for signing JWTs, but we recommend securely generating a string of at least 32 characters. For example: openssl rand -base64 32
note

Changing the JWT secret will log out your users

config:
  authType: mixed
  basicAuth:
    enabled: true
    initialOrgAdminEmail: <YOUR EMAIL ADDRESS>
    initialOrgAdminPassword: <PASSWORD>
    jwtSecret: <SECRET>

Once configured, you will see a login screen like the one below. You should be able to login with the initialOrgAdminEmail and initialOrgAdminPassword values, and your user will be auto-provisioned with role Organization Admin. See the admin guide for more details on organization roles.

LangSmith UI with basic auth

Was this page helpful?


You can leave detailed feedback on GitHub.