Zero Trust Access (OIDC) + Proxmox VE | Cloudflare Developers | Page 1

echo niche Apr 26, 2024, 5:27 AM

#

I'm trying to set up Proxmox VE via OIDC to use Cloudflare ZT as an authentication realm. I've got everything created, but unfortunately when I go to sign into Proxmox I get a "OpenID redirect failed. Failed to parse server response" error from Proxmox. This seems to be an error coming from the JSON decoder of a request generated by the openidconnect rust package, which Proxmox uses internally. Unfortunately, it is quite complex to set up a debug environment for the Proxmox side, so I'm wondering if anyone has any ideas or perhaps has a way to find out what's happening on the Cloudflare side? Thanks

drifting tide Apr 26, 2024, 1:44 PM

#

I've experienced the same and debugged it enough to learn that https://erisa.cloudflareaccess.com/.well-known/openid-configuration is missing some fields which the json decoder sees as required.
I'll raise this to the team when I can and see what they can do

echo niche Apr 26, 2024, 8:34 PM

#

awesome, thanks!

echo niche May 7, 2024, 12:12 AM

#

drifting tide I've experienced the same and debugged it enough to learn that https://erisa.clo...

Thought I'd check in on this. Any updates by chance?

#

Maybe I could cheat it by creating a worker to proxy the API and inject the necessary fields, but I don't know what openidconnect-rs is needing since the error is unfortunately not helpful

echo niche May 24, 2024, 6:25 AM

#

Bumping this issue. Is this something that is on the radar? It's currently the one thing keeping us from moving everything to ZTA

#Zero Trust Access (OIDC) + Proxmox VE