OIDC - Microsoft ADFS #352

New Issue

2025-11-13T11:57:44-06:00

GiteaMirror commented

2025-11-13 11:57:44 -06:00

Originally created by @manelmolinaig on GitHub (May 19, 2025).

I would like to use ADFS as IdP but callback is not working properly, I can enter credentials on my ADFS login page, but when browser goes back to pangolin, I get the this error:

IdP Settings:

Authorization URL: https://FQDN/adfs/oauth2/authorize/
Token URL: https://FQDN/adfs/discovery/keys
Token Configuration: on identifier path I tried to use: sub, preferred_username and samaccountname (according to adfs claims)
Callback URL: https://FQDN/auth/idp/1/oidc/callback

Error from docker logs:


2025-05-19T12:17:57.045Z [error]: Unexpected error response
Stack: Error: Unexpected error response
    at sendTokenRequest (file:///app/node_modules/arctic/dist/request.js:74:11)
    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
    at async OAuth2Client.validateAuthorizationCode (file:///app/node_modules/arctic/dist/client.js:66:24)
    at async gg (file:///app/dist/server.mjs:31:139872) {"status":405}

ADFS Claims:

From docker container terminal using wget I can reach ADFS
I'm on version 1.4

Any idea?
Thanks!

Originally created by @manelmolinaig on GitHub (May 19, 2025). I would like to use ADFS as IdP but callback is not working properly, I can enter credentials on my ADFS login page, but when browser goes back to pangolin, I get the this error: ![Image](https://github.com/user-attachments/assets/269774a3-eb8f-4f81-945f-8cf9e4b9a608) **IdP Settings:** Authorization URL: https://FQDN/adfs/oauth2/authorize/ Token URL: https://FQDN/adfs/discovery/keys Token Configuration: on identifier path I tried to use: sub, preferred_username and samaccountname (according to adfs claims) Callback URL: https://FQDN/auth/idp/1/oidc/callback **Error from docker logs:** ``` 2025-05-19T12:17:57.045Z [error]: Unexpected error response Stack: Error: Unexpected error response at sendTokenRequest (file:///app/node_modules/arctic/dist/request.js:74:11) at process.processTicksAndRejections (node:internal/process/task_queues:95:5) at async OAuth2Client.validateAuthorizationCode (file:///app/node_modules/arctic/dist/client.js:66:24) at async gg (file:///app/dist/server.mjs:31:139872) {"status":405} ``` **ADFS Claims:** ![Image](https://github.com/user-attachments/assets/5e198e31-dadc-4fa2-a3a4-1235de5b54f1) From docker container terminal using wget I can reach ADFS I'm on version 1.4 Any idea? Thanks!

GiteaMirror added the stale label 2025-11-13 11:57:44 -06:00

GiteaMirror closed this issue

2025-11-13 11:57:44 -06:00

GiteaMirror commented

2025-11-13 11:57:45 -06:00

@github-actions[bot] commented on GitHub (Jun 3, 2025):

This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.

@github-actions[bot] commented on GitHub (Jun 3, 2025): This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.

GiteaMirror commented

2025-11-13 11:57:45 -06:00

@github-actions[bot] commented on GitHub (Jun 18, 2025):

This issue has been automatically closed due to inactivity. If you believe this is still relevant, please open a new issue with up-to-date information.

@github-actions[bot] commented on GitHub (Jun 18, 2025): This issue has been automatically closed due to inactivity. If you believe this is still relevant, please open a new issue with up-to-date information.