Can't get SSO to work with Authentik

EHRETic · October 6

Hi there,

I was pleased to learn that this new version would include SSO. I was looking for it so I tested straight away.

Unfortunately, I can't get it to work, I will always get a popup with the error:

And this, despite I have the redirect URL configured to a regex https://xormon.mydomain/api/oidc/v1/*

I've also tried to both strict URL mentioned in documentation, this didn't change.

I share my Xormon SSO configuration just in case:

PS: I've many apps already working with the same Authentik instance

Thanks in advance! 😉👌

TomasJetelina · October 6

I've just tested Authentik and it works. Are you setting the redirect URLs correctly?

EHRETic · October 10

Hi,

Strange, this is what I have in my redirect URL(s):

Of course, <xormon-server> was replaced by my external Xormon URL! 😊

And I also tried this as in documentation (of course with my domain):

I didn't put the redirect URL straight away, so I'll rebuild it from scratch to be sure.

TomasJetelina · October 10

for regex try /.* instead of just /* wildcard

EHRETic · October 17

Hi,

Sorry, I thought I did answer the last comment but I probably forgot...

Unfortunately, the new regex didn't solve the issue.

Any idea where I can start looking? Reverse proxy settings?

TomasJetelina · October 17

When you see the redirect URI error in new window, what is the redirect URL in address bar? Is it same as entered in Authentik?

EHRETic · October 22

So it takes my Xormon macvlan IP address on local network and I would say"of course" it doesn't work from outside... 😊

At some point, this app reacts differently from the others (i use only macvlan for containers) but I don't know how to fix that.

mota · October 22

For now, set preserve host in your proxy configuration.

In next Xormon version we can try to lookup proxy host from headers.

EHRETic · November 5

Hi,

Thanks a lot, that helped, I can now login (also learned something at the same time!)

Comments