Skip to content

Identity Input

The Identity Input component (IdentityInput) returns identity information about the user running the flow. It reads the session JWT injected by the KARLI proxy and exposes the decoded claims as a Data object that downstream components can consume.

Use it whenever a flow needs to personalize, authorize, or audit behavior based on who is running it.

Requirements

The component requires an authenticated session — it must be run via the KARLI proxy so that a JWT is present on the request. Running a flow with this component outside that context (for example, anonymously in the Langflow Playground) will fail with:

No JWT available. This component requires an authenticated session via the KARLI proxy.

Inputs

The component has no inputs. The identity is taken from the session, not the canvas.

Output

A single output, User Identity, emits a Data containing the decoded JWT claims. The fields surfaced include:

Field Description
sub Subject — the unique user identifier.
email The user's email address.
name The user's full name.
given_name First name.
family_name Last name.
preferred_username Username chosen by the user.
realm_access Realm-level role assignments.
resource_access Per-resource role assignments.
groups Group memberships.

Fields that are absent from the JWT are simply absent from the output.

Typical Uses

  • Personalizing system prompts with the user's name.
  • Branching flow logic on group or role membership.
  • Recording the acting user in downstream audit or logging components.