[GH-ISSUE #5535] Microsoft OAuth: The email or password provided is incorrect #29550

New Issue

GiteaMirror · 2026-04-25T03:55:28-05:00

GiteaMirror commented

2026-04-25 03:55:28 -05:00

Originally created by @dmitryzykov on GitHub (Sep 19, 2024).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/5535

Bug Report

Installation Method

helm open-webui-3.1.16

Environment

Open WebUI Version: 0.3.21

Confirmation:

I have read and followed all the instructions provided in the README.md.
I am on the latest version of both Open WebUI and Ollama.
I have included the browser console logs.
I have included the Docker container logs.
I have provided the exact steps to reproduce the bug in the "Steps to Reproduce" section below.

Expected Behavior:

login should work

Actual Behavior:

After successful auth in Microsoft I get this error in browser:
{"detail":"The email or password provided is incorrect. Please check for typos and try logging in again."}

Description

We use Microsoft OAuth and configured it as per documentation:

MICROSOFT_CLIENT_ID: [REMOVED]
MICROSOFT_CLIENT_SECRET: [REMOVED]
MICROSOFT_CLIENT_TENANT_ID: [REMOVED]
ENABLE_OAUTH_SIGNUP: True

After successful auth in Microsoft I get this error in browser:
{"detail":"The email or password provided is incorrect. Please check for typos and try logging in again."}

In the openwebui logs:

[open_webui.main] OAuth callback error: mismatching_state: CSRF Warning! State not equal in request and response.
INFO:     172.70.210.42:0 - "
GET /oauth/microsoft/callback?code=[REMOVED]&session_state=30a04c3a-7925-4878-a11a-ac161478462a HTTP/1.1
" 400 Bad Request

In Microsoft settings we have this: OIDC-based Sign-on > OIDC-based Sign-on › Attributes & Claims ›

we tried with different values combinations for OAUTH_EMAIL_CLAIM: email, username, preferred_username but error is the same

Originally created by @dmitryzykov on GitHub (Sep 19, 2024). Original GitHub issue: https://github.com/open-webui/open-webui/issues/5535 # Bug Report ## Installation Method helm open-webui-3.1.16 ## Environment - **Open WebUI Version:** 0.3.21 **Confirmation:** - [x] I have read and followed all the instructions provided in the README.md. - [x] I am on the latest version of both Open WebUI and Ollama. - [x] I have included the browser console logs. - [x] I have included the Docker container logs. - [x] I have provided the exact steps to reproduce the bug in the "Steps to Reproduce" section below. ## Expected Behavior: login should work ## Actual Behavior: After successful auth in Microsoft I get this error in browser: `{"detail":"The email or password provided is incorrect. Please check for typos and try logging in again."}` ## Description We use Microsoft OAuth and configured it as per documentation: ``` MICROSOFT_CLIENT_ID: [REMOVED] MICROSOFT_CLIENT_SECRET: [REMOVED] MICROSOFT_CLIENT_TENANT_ID: [REMOVED] ENABLE_OAUTH_SIGNUP: True ``` After successful auth in Microsoft I get this error in browser: `{"detail":"The email or password provided is incorrect. Please check for typos and try logging in again."}` In the openwebui logs: ``` [open_webui.main] OAuth callback error: mismatching_state: CSRF Warning! State not equal in request and response. INFO: 172.70.210.42:0 - " GET /oauth/microsoft/callback?code=[REMOVED]&session_state=30a04c3a-7925-4878-a11a-ac161478462a HTTP/1.1 " 400 Bad Request ``` In Microsoft settings we have this: OIDC-based Sign-on > OIDC-based Sign-on › Attributes & Claims › <img width="796" alt="image" src="https://github.com/user-attachments/assets/e80051bc-0af9-4fb1-a1e6-af59bafdfb64"> we tried with different values combinations for `OAUTH_EMAIL_CLAIM`: `email`, `username`, `preferred_username` but error is the same

GiteaMirror closed this issue

2026-04-25 03:55:28 -05:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/open-webui#29550