github-starred/open-webui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-07-16 06:03:26 -05:00
Code Issues 2.4k Packages Projects Releases 129 Wiki Activity

[GH-ISSUE #7767] SSO Issue when embedded Open WebUI in webpage or microsoft teams #14882

New Issue
Closed
opened 2026-04-19 21:08:16 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-19 21:08:16 -05:00
Owner
Copy Link

Originally created by @julienlebutte on GitHub (Dec 11, 2024).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/7767

Installation Method

Kubernetees or Docker (Same issue)

Environment

  • Open WebUI Version: v0.4.8

  • Ollama (if applicable): 0.5.1

  • Operating System: Windows 10

  • Browser (if applicable): Chrome or Teams

Confirmation:

  • I have read and followed all the instructions provided in the README.md.
  • I am on the latest version of both Open WebUI and Ollama.
  • I have included the browser console logs.
  • I have included the Docker container logs.
  • I have provided the exact steps to reproduce the bug in the "Steps to Reproduce" section below.

Expected Behavior:

Open WebUI is installed on a specific container with Ollama.
Microsoft SSO is configured and working well on browser.
Open WebUI is behind a F5 with only one node.

Actual Behavior:

When i access the Open WebUI website, SSO authentication is working well.
When i access the Open WebUI website include in an iframe website, SSO is not working.
When i access the Open WebUI website include in a Microsoft Teams application, SSO is not working.

Description

Bug Summary:

Based on the SSO scheme, call to EntraID is working, i see the authentication on the identity provider.
On the network trace, the callback url give an error : 400 bad request

Reproduction Details

Steps to Reproduce:
Configure Microsoft authetication on Open WEbUi
Integrate Open WebUI site on any other site with an iframe (SharePoint, Wordpress, Microsoft Teams, ....)
Try to log in

Logs and Screenshots

Browser Console Logs:

openwebui1

Docker Container Logs:

WARNI [open_webui.utils.oauth] OAuth callback error: mismatching_state: CSRF Warning! State not equal in request and response.
INFO: 10.42.0.1:0 - "GET /oauth/microsoft/callback?code=1.ASEAUm_EtlxiS0GsosSk8Oe9IGApLSeqYV5Ms0Et-YbXf8AYAS0hAA.AgABBAIAAADW6jl31mB3T7ugrWTT8pFeAwDs_wUA9P_jcxwySU6P0fMNbIPV7-jSPhpvX1VFR2DE5mK2bfGQKeN34e1z8tDf-ayN10--5cBq3ER77v7uaFsR9xdIEdcHd7YB0hZMUejCIQgEXOtiBlQkAtXZf0k0irIJL-w2zP_rhgVbISeOnqC6YQuUeYrqLoAAksnYgeSSc4JO4NmRU9Hy6OVjqFAArNfEL2ll-9svMpY7PcvpMVp1UdVTiMVfWT1pooaKPoe3qxR0bDzoJN_2XHHXoO-pdtOcGdY6RMyeQQattrDSZ_vbZo70t33R7uY2uUGyapKQBk7hlDDUPa-NfD_cbo5IGhkXdeaa4fjgyEpighFmQFThBm6csJ7i7fnvSPi_aKPnstGgCOaNEiK3OVnhq8qqBiAMEaT5-LtMB2qP20NdIKrzhuwpnX392YCl3SDjvIBLCzlenbzY0IoqMUdX6njzeUsvbYNKrfhGZ0iCLFyLx1bwiL8qhKSDtgA-XXXXXXXXX-9hSFHdKa7bJ8_YxCMvrPXpLSLEwNNsXfmSdRk4hI7S5JISyiDNMPst8jq7cZO3SeNmhDqF8Uh0JP-Ty7l50iw64dk-ypnLzpQUqmR0cAY0O3u62EwnvzZOt6CSErP_H7Q-r2mcwl_ObE5tL2x44WiQhttP-sJ6bFJrnw05yTIvJnJ01YFa-ERvg-XXXXXXX-tinUzQb2Q3eAbHn4gBkMMHIgRoZ5IBYCvkHnVfGeFY1u0BqW6d_NkFZmVZ78XDgMbjGw8&state=xb57MICcVFdlOjqJyD9lyb2t8Uq3MX&session_state=XXXXXXXXXXX HTTP/1.1" 400 Bad Request
INFO: connection closed

Originally created by @julienlebutte on GitHub (Dec 11, 2024). Original GitHub issue: https://github.com/open-webui/open-webui/issues/7767 ## Installation Method Kubernetees or Docker (Same issue) ## Environment - **Open WebUI Version:** v0.4.8 - **Ollama (if applicable):** 0.5.1 - **Operating System:** Windows 10 - **Browser (if applicable):** Chrome or Teams **Confirmation:** - [X] I have read and followed all the instructions provided in the README.md. - [X] I am on the latest version of both Open WebUI and Ollama. - [X] I have included the browser console logs. - [X] I have included the Docker container logs. - [X] I have provided the exact steps to reproduce the bug in the "Steps to Reproduce" section below. ## Expected Behavior: Open WebUI is installed on a specific container with Ollama. Microsoft SSO is configured and working well on browser. Open WebUI is behind a F5 with only one node. ## Actual Behavior: When i access the Open WebUI website, SSO authentication is working well. When i access the Open WebUI website include in an iframe website, SSO is not working. When i access the Open WebUI website include in a Microsoft Teams application, SSO is not working. ## Description **Bug Summary:** Based on the SSO scheme, call to EntraID is working, i see the authentication on the identity provider. On the network trace, the callback url give an error : 400 bad request ## Reproduction Details **Steps to Reproduce:** Configure Microsoft authetication on Open WEbUi Integrate Open WebUI site on any other site with an iframe (SharePoint, Wordpress, Microsoft Teams, ....) Try to log in ## Logs and Screenshots **Browser Console Logs:** <img width="1084" alt="openwebui1" src="https://github.com/user-attachments/assets/69174b3e-ef51-439b-9bfe-f5b74dcd5e10"> **Docker Container Logs:** WARNI [open_webui.utils.oauth] OAuth callback error: mismatching_state: CSRF Warning! State not equal in request and response. INFO: 10.42.0.1:0 - "GET /oauth/microsoft/callback?code=1.ASEAUm_EtlxiS0GsosSk8Oe9IGApLSeqYV5Ms0Et-YbXf8AYAS0hAA.AgABBAIAAADW6jl31mB3T7ugrWTT8pFeAwDs_wUA9P_jcxwySU6P0fMNbIPV7-jSPhpvX1VFR2DE5mK2bfGQKeN34e1z8tDf-ayN10--5cBq3ER77v7uaFsR9xdIEdcHd7YB0hZMUejCIQgEXOtiBlQkAtXZf0k0irIJL-w2zP_rhgVbISeOnqC6YQuUeYrqLoAAksnYgeSSc4JO4NmRU9Hy6OVjqFAArNfEL2ll-9svMpY7PcvpMVp1UdVTiMVfWT1pooaKPoe3qxR0bDzoJN_2XHHXoO-pdtOcGdY6RMyeQQattrDSZ_vbZo70t33R7uY2uUGyapKQBk7hlDDUPa-NfD_cbo5IGhkXdeaa4fjgyEpighFmQFThBm6csJ7i7fnvSPi_aKPnstGgCOaNEiK3OVnhq8qqBiAMEaT5-LtMB2qP20NdIKrzhuwpnX392YCl3SDjvIBLCzlenbzY0IoqMUdX6njzeUsvbYNKrfhGZ0iCLFyLx1bwiL8qhKSDtgA-XXXXXXXXX-9hSFHdKa7bJ8_YxCMvrPXpLSLEwNNsXfmSdRk4hI7S5JISyiDNMPst8jq7cZO3SeNmhDqF8Uh0JP-Ty7l50iw64dk-ypnLzpQUqmR0cAY0O3u62EwnvzZOt6CSErP_H7Q-r2mcwl_ObE5tL2x44WiQhttP-sJ6bFJrnw05yTIvJnJ01YFa-ERvg-XXXXXXX-tinUzQb2Q3eAbHn4gBkMMHIgRoZ5IBYCvkHnVfGeFY1u0BqW6d_NkFZmVZ78XDgMbjGw8&state=xb57MICcVFdlOjqJyD9lyb2t8Uq3MX&session_state=XXXXXXXXXXX HTTP/1.1" 400 Bad Request INFO: connection closed
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
confirmed issue
core
documentation
enhancement
good first issue
help wanted
non-core
pull-request
Mirrored from GitHub Pull Request
 python
question
testing wanted
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#14882
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?