Disable Create Organizations

[mjain2-godaddy]

Hi Langfuse Team,

We have a self-hosted Langfuse setup integrated with Okta authentication via OIDC. I understand that to restrict users from creating new organizations, we can use the LANGFUSE_ALLOWED_ORGANIZATION_CREATORS setting. However, since this feature is only available in the Enterprise version, I’d like to ask:

Is there any workaround to prevent users from creating new organizations on their own in the self hosted version? Thank You!

[inkeep-ai-assistant[bot]]

You're correct that the LANGFUSE_ALLOWED_ORGANIZATION_CREATORS setting is only available in the Enterprise Edition(1). Based on the available documentation, there isn't a built-in workaround to prevent organization creation in the open-source self-hosted version.

The documentation confirms that Organization Creators is an Enterprise Edition (EE) feature that allows you to restrict who can create organizations(1). In the open-source version, users who authenticate successfully can create new organizations and projects(2).

A community discussion highlighted this exact limitation, where a user noted: "Block users from creating their own organizations and projects. If I understand correctly, that's a feature of the Enterprise Edition (LANGFUSE_ALLOWED_ORGANIZATION_CREATORS), right?"(2). The response confirmed this is correct.

One approach mentioned in the community discussions is to configure your OAuth provider (Okta in your case) to restrict which users should have access to Langfuse based on their role or group(2). However, this would control access to Langfuse entirely rather than just preventing organization creation.

For your specific use case with Okta OIDC integration, you could:

1. Use Okta's application assignment policies to limit which users can access Langfuse
2. Consider upgrading to the Enterprise Edition to access the LANGFUSE_ALLOWED_ORGANIZATION_CREATORS feature

Unfortunately, the open-source version doesn't provide configuration options to restrict organization creation while still allowing user access to existing organizations.

📚 Sources:

1. Administration Overview (self-hosted)
2. Langfuse User Management with Custom Oauth

---

Have another question? Just tag @inkeep.

[AkioNuernberger]

@mjain2-godaddy, Thanks for reaching out. Could I kindly ask you to send an email to enterprise@langfuse.com? Let's find a quick solution there.