# Upcoming changes to identity management integrations **URL:** \ **Category:** Announcements\ **Created:** [August 26, 2021, 5:50pm UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994 "2021-08-26T17:50:05Z")\ **Posts on this page:** 20\ **Page:** 2
**Author:** ![ldapuser](https://avatars.discourse-cdn.com/v4/letter/l/71e660/32.png) [@ldapuser](https://forums.rocket.chat/u/ldapuser)\ **Post date:** [September 2, 2021, 8:34pm UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/21 "2021-09-02T20:34:18Z")
I use the LDAP integration for a small number of family/friends. The proposed restrictions make LDAP functionally worthless, so you may as well remove it altogether. I’m definitely ditching RocketChat and will stop recommending it any longer. ---
**Author:** ![Goblin](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/goblin/32/3095_2.png) [@Goblin](https://forums.rocket.chat/u/Goblin)\ **Post date:** [September 2, 2021, 9:00pm UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/22 "2021-09-02T21:00:26Z")
Without custom OAuth integration, I can’t use it for company internal projects. ---
**Author:** ![bbrendon](https://avatars.discourse-cdn.com/v4/letter/b/3e96dc/32.png) [@bbrendon](https://forums.rocket.chat/u/bbrendon)\ **Post date:** [September 2, 2021, 9:54pm UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/23 "2021-09-02T21:54:16Z")
> [@gabriel.engel](#): > > It is important to note that, even after this release, Rocket.Chat will still be the only major open source communications platform to include any LDAP feature I think it’s a bit disingenuous to constantly ignore the biggest competitor to rocket chat. You guys act like you’re the only game in town. Zulip clearly has LDAP support. > **[Configure authentication methods | Zulip help center](https://zulip.com/help/configure-authentication-methods)** > > By default, Zulip allows logging in via email/password as well as various social authentication providers like Google, GitHub, GitLab, and Apple. You can restrict users to logging in via only a subset of these methods. | LDAP and various custom SSO... ---
**Author:** ![sing.li](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/sing.li/32/6_2.png) [@sing.li](https://forums.rocket.chat/u/sing.li)\ **Post date:** [September 2, 2021, 11:31pm UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/24 "2021-09-02T23:31:00Z")
No. Google Auth integration continues to work in CE, as with all social media auth. Please see details in [this document](https://docs.rocket.chat/guides/administration/administration/settings/ldap) ---
**Author:** ![sing.li](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/sing.li/32/6_2.png) [@sing.li](https://forums.rocket.chat/u/sing.li)\ **Post date:** [September 2, 2021, 11:38pm UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/25 "2021-09-02T23:38:18Z")
@szampardi and @jason Custom oauth is not all moving to Enterprise. Much of its functionality remains. Please see the bottom [of this chart](https://docs.rocket.chat/guides/administration/administration/settings/ldap) for specific details. ---
**Author:** ![sing.li](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/sing.li/32/6_2.png) [@sing.li](https://forums.rocket.chat/u/sing.li)\ **Post date:** [September 2, 2021, 11:55pm UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/26 "2021-09-02T23:55:38Z")
@sahan Custom Oauth is not all moving to Enterprise, our CE version still supports some LDAP, SAML and Oauth capabilities. Please see the bottom of [this chart](https://docs.rocket.chat/guides/administration/administration/settings/ldap) for specific details. ---
**Author:** ![sing.li](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/sing.li/32/6_2.png) [@sing.li](https://forums.rocket.chat/u/sing.li)\ **Post date:** [September 3, 2021, 12:03am UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/27 "2021-09-03T00:03:50Z")
Oauth and custom oauth are not all removed from CE. If you oauth via keycloak you should be unaffected. See bottom of [this chart](https://docs.rocket.chat/guides/administration/administration/settings/ldap) for details on which part of custom oauth is moving. ---
**Author:** ![sing.li](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/sing.li/32/6_2.png) [@sing.li](https://forums.rocket.chat/u/sing.li)\ **Post date:** [September 3, 2021, 12:17am UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/28 "2021-09-03T00:17:53Z")
@underresting Thank you for your comment. No, not only in Gold plan. See [this chart](https://docs.rocket.chat/guides/administration/administration/settings/ldap) for details of what is on the other plans. If you are a non-profit actually affected by this change, please contact me via DM @sing.li[https://open.rocket.chat](https://open.rocket.chat) or email to community@rocket.chat ---
**Author:** ![sing.li](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/sing.li/32/6_2.png) [@sing.li](https://forums.rocket.chat/u/sing.li)\ **Post date:** [September 3, 2021, 12:27am UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/29 "2021-09-03T00:27:03Z")
@dennis4720 Thank you for your comment. If you are a non-profit actually affected by this change (please verify your LDAP needs with [this chart](https://docs.rocket.chat/guides/administration/administration/settings/ldap)), please contact @sing.li on [https://open.rocket.chat](https://open.rocket.chat) or community@rocket.chat via email ---
**Author:** ![sahan](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@sahan](https://forums.rocket.chat/u/sahan)\ **Post date:** [September 3, 2021, 4:15am UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/30 "2021-09-03T04:15:07Z")
I saw that roles and avatars are not synced, which is fine for our particular application. But can we still add our own custom OAuth provider? For your reference, I’m referring to adding Azure B2C as a custom OAuth provider. ---
**Author:** ![tomaszd](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@tomaszd](https://forums.rocket.chat/u/tomaszd)\ **Post date:** [September 3, 2021, 5:20am UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/31 "2021-09-03T05:20:34Z")
@sing.li do you have anything to say about the hostage situation with ripping out existing LDAP functionality? ---
**Author:** ![Blackclaws](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/blackclaws/32/3097_2.png) [@Blackclaws](https://forums.rocket.chat/u/Blackclaws)\ **Post date:** [September 3, 2021, 11:05am UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/33 "2021-09-03T11:05:22Z")
I think the issue as underlined by other people here, is that you are cutting back functionality in the free version and moving it to a paid tier. That sort of behaviour is always risky. Gitlab for example has promised that they will never do this, and I would assume that a similar backlash if not larger would happen there if that were to happen. The reason this feels so nasty is that you are essentially taking something from the community. There is no real reason given except that it seems like you expect to get more revenue out of this. I urge you to rethink this decision especially because all the code that you are now thinking of taking behind closed doors is already open to begin with. ---
**Author:** ![sing.li](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/sing.li/32/6_2.png) [@sing.li](https://forums.rocket.chat/u/sing.li)\ **Post date:** [September 3, 2021, 3:03pm UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/34 "2021-09-03T15:03:31Z")
Our CE version supports basic LDAP, SAML and Oauth capabilities. If you need an extension of it, please contact us for information on cost of the Enterprise Edition, volume discounts and accommodations for contributing community members. Also, it is good to remember that we support with zero or special rate to non profit and open source and developer communities. ---
**Author:** ![sing.li](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/sing.li/32/6_2.png) [@sing.li](https://forums.rocket.chat/u/sing.li)\ **Post date:** [September 3, 2021, 3:56pm UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/35 "2021-09-03T15:56:41Z")
Rocket.Chat is constantly working to have the best product versions both CE and EE, and works to address reported issues and bug fixes in our monthly releases. As our identity management offering has expanded, we’ve recognized the need to improve support for this growing pool of functionality. The team has recently completed a re-factoring of advanced identity management features and by moving that code to EE we will be able to fund the ongoing support for the functionality and continue to extend the platform’s identity management capabilities. Our goal is to enable Rocket.Chat users to have a choice between extending basic LDAP, SAML and Oauth capabilities to fit their needs using our free CE or choose EE in order to access the re-factored suite of extended capabilities. ---
**Author:** ![sing.li](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/sing.li/32/6_2.png) [@sing.li](https://forums.rocket.chat/u/sing.li)\ **Post date:** [September 3, 2021, 4:02pm UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/36 "2021-09-03T16:02:24Z")
Thanks for reaching out on this. As mentioned in our announcement, we are happy to discuss in particular cases to make accommodation for contributing community members. We will contact you for this matter. We currently invest considerably in the ongoing expansion of the CE and EE versions of Rocket.Chat. We are working to ensure that we have a healthy ecosystem that enables CE users to continue to use and extend our free open-source features which is why the basic LDAP sync, basic SAML and Oauth are staying in CE. ---
**Author:** ![sing.li](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/sing.li/32/6_2.png) [@sing.li](https://forums.rocket.chat/u/sing.li)\ **Post date:** [September 3, 2021, 4:17pm UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/37 "2021-09-03T16:17:04Z")
Thanks for your feedback and we're glad that you're part of our growing community of users who love Rocket.Chat. We understand that organizations use Rocket.Chat in a wide variety of ways, so please contact us for information on cost of the Enterprise Edition, volume discounts and accommodations for contributing community members. We want to emphasize that, for supporting our community, we do provide accommodation for long-standing, contributing community members. ---
**Author:** ![kiilo](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/kiilo/32/2920_2.png) [@kiilo](https://forums.rocket.chat/u/kiilo)\ **Post date:** [September 3, 2021, 9:36pm UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/38 "2021-09-03T21:36:24Z")
Sorry this won’t work for us, currently 890 users out of an university LDAP - paying 32.040$ annually is out of any considerable option, not even close to our storage budget. - anyway university is moving to MS teams 😶 i loved the integrations in and out, to zabbix, gitlab and redmine ~ and its all lost. I have to shut down the instance after some time … all best for your future. K ---
**Author:** ![tomaszd](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@tomaszd](https://forums.rocket.chat/u/tomaszd)\ **Post date:** [September 4, 2021, 9:45am UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/39 "2021-09-04T09:45:27Z")
I don’t think you understand the reality of the situation. You are setting a precedent that at any time any crucial functionality can be taken away from CE. For example the workaround right now, as far as I understand the feature comparison table, is to install CAS, use LDAP as its backend and configure CAS integration with RC (God knows how to migrate existing users to maintain their chat history, I would have to invest time to figure it out). What if in two months you realize this and decide to remove CAS integration? Nobody wants to play your game anymore. You either don’t remove the current CE features ever or you do, so which is it? ---
**Author:** ![bkraul](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/bkraul/32/842_2.png) [@bkraul](https://forums.rocket.chat/u/bkraul)\ **Post date:** [September 4, 2021, 11:30am UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/40 "2021-09-04T11:30:48Z")
Agreed here. This is a very poor approach. But the consequence will likely be felt in the plummeting market share in the coming months. There are more than several FOSS products that went enterprise at some point that never, ever did that to the community, and thus, they are still going strong. But, in the end…it is their product, and their right to choose to self-destruct with their decisions. ---
**Author:** ![underresting](https://avatars.discourse-cdn.com/v4/letter/u/9de0a6/32.png) [@underresting](https://forums.rocket.chat/u/underresting)\ **Post date:** [September 6, 2021, 9:39am UTC](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994/41 "2021-09-06T09:39:38Z")
Welcom on the “SSO Wall of Shame”: [https://sso.tax/](https://sso.tax/) [Previous page](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994.md?page=1) [Next page](https://forums.rocket.chat/t/upcoming-changes-to-identity-management-integrations/11994.md?page=3)