#Azure Entra OIDC not working

1 messages · Page 1 of 1 (latest)

blissful gust
#

Hi, I've installed LibreChat fresh yesterday and tried to get Azure Entra login via OIDC working following the doc on the website, but after logging in with my account I just get a "An unknown error occurred." message from https://my-ip/oauth/openid/callback?code=1.AS8AaTDsdfdsfsdfsdfsdfsfsdfsdfsdfs

In Entra I get a successful login in the logs and even after putting the logs to debug in LibreChat all I get is "error: ErrorController => error server responded with an error in the response body"

DOMAIN_CLIENT=https://ip
DOMAIN_SERVER=https://ip

OPENID_CLIENT_ID=1234567890
OPENID_CLIENT_SECRET=thesecretgoeshere
OPENID_ISSUER=https://login.microsoftonline.com/tenentID/v2.0/
OPENID_SESSION_SECRET=justabunchofletters
OPENID_SCOPE=openid profile email
OPENID_CALLBACK_URL=/oauth/openid/callback
#OPENID_REQUIRED_ROLE=
OPENID_REQUIRED_ROLE_TOKEN_KIND=id

I just updated to the latest release from tonight, and I still get the error. Any suggestions?

blissful gust
#

I found the debug option for OIDC and found that I get "[openidStrategy] Response status: 401 Unauthorized " but I have no clue why

random frost
#

working for me, try following the guide: https://www.librechat.ai/docs/configuration/authentication/OAuth2-OIDC/azure

# ENTRA
OPENID_CLIENT_ID=myclientid
OPENID_CLIENT_SECRET=myclientsecret
OPENID_ISSUER=https://login.microsoftonline.com/MY_ISSUER_ID/v2.0/
OPENID_SESSION_SECRET=someuniquesecret
OPENID_SCOPE="openid profile email"
OPENID_CALLBACK_URL=/oauth/openid/callback
OPENID_USE_END_SESSION_ENDPOINT=true

Learn how to configure LibreChat to use Azure Entra for user authentication.

blissful gust
#

hey, I followed that guide before and adding OPENID_USE_END_SESSION_ENDPOINT=true
still gives me the same error