[GH-ISSUE #8571] Microsoft Entra Oauth integration: Users keep being reset to "pending" #15175

New Issue

GiteaMirror · 2026-04-19T21:27:35-05:00

GiteaMirror commented

2026-04-19 21:27:35 -05:00

Originally created by @maxupp on GitHub (Jan 15, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/8571

Installation Method

Installed via Helmchart with slight alterations to the UI (Icons etc.).
Integrated with Microsoft Entra via Oauth.

Environment

Open WebUI Version: 0.5.4
Operating System: Ubuntu in Docker
Browser (if applicable): all

Confirmation:

Expected Behavior:

New users should be forwarded to our SSO, and then receive the "user" role by default, without the need for the account to be confirmed.

Actual Behavior:

Users are confronted with an "Account activation pending" screen on first login, and then regularly lose access to the service after they have been manually confirmed and given the user role via the admin console.

Description

Bug Summary:
See above, the main issue is that every day users are reset to the "pending" state, and therefore cannot access the OpenWebUI service.

Reproduction Details

Steps to Reproduce:
[Outline the steps to reproduce the bug. Be as detailed as possible.]

Logs and Screenshots

Configuration Variables:
`extraEnvVars:

name: ENABLE_OAUTH_SIGNUP
value: "True"
name: ENABLE_OAUTH_ROLE_MANAGEMENT
value: "True"
name: MICROSOFT_CLIENT_ID
value: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
name: MICROSOFT_CLIENT_TENANT_ID
value: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
name: ENABLE_SIGNUP
value: "True"
name: ENABLE_LOGIN_FORM
value: "False"
name: DEFAULT_USER_ROLE
value: user
name: OAUTH_ROLES_CLAIM
value: roles
name: OAUTH_ADMIN_ROLES
value: admin
name: ENABLE_ADMIN_CHAT_ACCESS
value: "False"
name: MICROSOFT_CLIENT_SECRET
valueFrom:
secretKeyRef:
name: entra-client-secret
key: MICROSOFT_CLIENT_SECRET`

Originally created by @maxupp on GitHub (Jan 15, 2025). Original GitHub issue: https://github.com/open-webui/open-webui/issues/8571 ## Installation Method Installed via Helmchart with slight alterations to the UI (Icons etc.). Integrated with Microsoft Entra via Oauth. ## Environment - **Open WebUI Version: 0.5.4** - **Operating System:** Ubuntu in Docker - **Browser (if applicable):** all **Confirmation:** ## Expected Behavior: New users should be forwarded to our SSO, and then receive the "user" role by default, without the need for the account to be confirmed. ## Actual Behavior: Users are confronted with an "Account activation pending" screen on first login, and then regularly lose access to the service after they have been manually confirmed and given the user role via the admin console. ## Description **Bug Summary:** See above, the main issue is that every day users are reset to the "pending" state, and therefore cannot access the OpenWebUI service. ## Reproduction Details **Steps to Reproduce:** [Outline the steps to reproduce the bug. Be as detailed as possible.] ## Logs and Screenshots Configuration Variables: `extraEnvVars: - name: ENABLE_OAUTH_SIGNUP value: "True" - name: ENABLE_OAUTH_ROLE_MANAGEMENT value: "True" - name: MICROSOFT_CLIENT_ID value: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx - name: MICROSOFT_CLIENT_TENANT_ID value: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx - name: ENABLE_SIGNUP value: "True" - name: ENABLE_LOGIN_FORM value: "False" - name: DEFAULT_USER_ROLE value: user - name: OAUTH_ROLES_CLAIM value: roles - name: OAUTH_ADMIN_ROLES value: admin - name: ENABLE_ADMIN_CHAT_ACCESS value: "False" - name: MICROSOFT_CLIENT_SECRET valueFrom: secretKeyRef: name: entra-client-secret key: MICROSOFT_CLIENT_SECRET`

GiteaMirror closed this issue

2026-04-19 21:27:37 -05:00

GiteaMirror referenced this issue

2026-04-20 05:00:00 -05:00

[PR #15175] [CLOSED] [Perf] Default database pool size to 1 #23744

GiteaMirror referenced this issue

2026-04-25 11:59:05 -05:00

[PR #15175] [CLOSED] [Perf] Default database pool size to 1 #39374

GiteaMirror referenced this issue

2026-04-29 21:43:46 -05:00

[PR #15175] [CLOSED] [Perf] Default database pool size to 1 #46792

GiteaMirror referenced this issue