ZITADEL

ZITADEL - Identity infrastructure, simplified for you.

Join

ZITADEL

ZITADEL - Identity infrastructure, simplified for you.

Join

questions-help-bugs

product-feedback-requests

malte

8/13/2025

Problem using AuthorizationService API - {"code":5,"message":"Not Found"}

I am trying to use the Authorization Service API but can't get it to work. For Authorization i am using a service User PAT. The service user has "Org User Manager" and many more memberships. Endpoints like zitadel.cloud/v2/users/ work and return the expected data. For /zitadel.authorization.v2beta.AuthorizationService/CreateAuthorization i only ever get '{"code":5,"message":"Not Found"}'....

Arnau

8/12/2025

Understanding eventstore.unique_constraints (V3-DKcYh)

Hello, In a self-hosted setup with a single Instance (v3.3.0) where we manage 1 organization with ~39k users, we’ve noticed leftover records in the eventstore.unique_constraints table that don’t correspond to any existing user in the instance Examples:...

Relecto

8/12/2025

fresh self-hosted installation - registration doesn't work?

hi! I'm currently evaluating Zitadel, and I can't get user self-registration working, so this must be a bug? I'm using latest docker-compose config as described here, https://zitadel.com/docs/self-hosting/deploy/compose/...

JollyMask

8/12/2025

Is ZITADEL suitable for a white-label B2B2B SaaS architecture?

I’m exploring whether ZITADEL is a good fit for a SaaS with a B2B2B architecture structured like this: Organization A – Subaccount 1 – Subaccount 2...

sp132

8/12/2025

Session state is not properly reduced

I've noticed that some terminated sessions still appear in the /v2/sessions response because sessions8 still lists them as active, even though there is a session.terminated event in the event log. There are no related errors/warnings in the log so I'm not sure what's happening. I'm running self-hosted 2.70.14 with PostgreSQL...

thefufanu

8/11/2025

Actions V2 - An internal error occurred

We have a fresh setup with version 3.3.2, with minimal config parameters. When we call actions V2 in the console UI, this error message always appears, and created actions are accepted but not displayed in the UI. Has anyone encountered this message before and has any idea what we could do?

Jon @ Posit

8/11/2025

Device Authorization has no PKCE Support

The methods rp.DeviceAuthorization and rp.DeviceAccessToken don't support PKCE for OPs that require PKCE for device authorization. rp.DeviceAuthorization does support a custom authFn, so you can pass a custom http.FormAuthorization function that adds the code_challenge and code_challenge_method. However, rp.DeviceAccessToken doesn't support an auth function. We worked around this limitation by creating a custom http RoundTripper that adds code_verifier to the form data and then...

AYEEDITYA

8/11/2025

SMTP on Digital Ocean Blocked

Hello hello Zitadel community! I’ve got an interesting one here, I recently migrated my self hosted Zitadel instance from on-prem to a digital ocean droplet. Everything works fantastic and migration was smooth as ever. However, self service emails have been rendered useless because digital ocean and other VPS providers default to blocking SMTP connections as a spam prevention policy which is fair. But now, if I have a locally administered user, how can they reset their passwords or even verify e...

bernard li

8/11/2025

Using the self built zitadel service, the front-end project opens a log message with HTTP 404

I built the backend service of zitadel locally using Docker, and the frontend uses the project source of zitadel typescript，The error is as follows： ⨯ Error [ConnectError]: [unimplemented] HTTP 404 at <unknown> (.next/server/chunks/2151.js:10:121781) at v (.next/server/chunks/2151.js:10:122258) at next (.next/server/chunks/2151.js:10:157654)...

Sietse

8/9/2025

zitadel-rust needs updates

I created an issue overhere: https://github.com/smartive/zitadel-rust/issues/606 Zitadel-rust seems sort of abandoned... Any suggestions how to go about this? My usecase is Axum....

Neureka

8/8/2025

Docker Compose from Documentation is Broken

Hey, the docker compose file obtained via wget as per the documentation is broken. I've made an issue here: https://github.com/zitadel/zitadel/issues/10432 Any help is appreciated!...

R7FX

8/8/2025

Could not get the context of the user and Could not verify password

Hello, again! I was trying to set up zitadel on my local network. A few days ago I have a problem regarding migration error. It's solved now, I have to modify the user on the docker compose file. It is now up and running. But, I have another problem. While trying to login, I have this warning that says:

Could not get the context of the user. Make sure to enter the username first or provide a loginName as searchParam.

Could not get the context of the user. Make sure to enter the username first or provide a loginName as searchParam.

after I entered the username (which is ```zitadel-admin@zitadel.192.168.2...

Avlambertucci

8/8/2025

Change password API call

Hi Zitadel team! I need to add change password on my app, I noticed that the v2 https://$CUSTOM-DOMAIN/v2/users/:userId/password is deprecated, it suggesting to use a PATCH on the user instead, but I just want to change the password, is that correct? Thanks!...

raykoshima

8/8/2025

domain per organization

I can set a organization to login using login scope but when I make a nginx redirect to my main instance here is overview - I self host zitadel with docker compose with ENV set ZITADEL_EXTERNALDOMAIN=accounts.company.com - I'm using nginx proxy manager...

tfmm

8/7/2025

Password Grant Type capability?

While I know that the Password grant type is being eventually deprecated by the oauth standards, is there a way to enable/allow it in zitadel? I am attempting to test/use the Turing Institute's LDAP frontend for OIDC to interface my zitadel auth with an application that only supports LDAP.

deleted user

8/7/2025

User not found?

Hey, I hosted zitadel with docker compose, everything worked well. I used this config, https://docs-git-simplify-compose-example-zitadel.vercel.app/docs/self-hosting/deploy/compose/ I added ExternalDomain so i could use my LAN address instead of localhost, it worked. In loginname, i entered zitadel-admin@lan addr as per the docs, but it say "User not found" What do I do?...

fireblazer🔥

8/7/2025

What is this use of subcommands

Can you guide me how can i use subcommand, since document doesn't provide how to exactly use those sub command zitadel mirror auth zitadel mirror eventstore zitadel mirror projections ...

R7FX

8/7/2025

Migration failed. Permission denied

Hello! I'm trying to run zitadel from the example but I got this migration permission error. I'm using the exact compose file as provided on a newly created LXC with fresh docker installation. How do I solve this? Thanks!

Iyyammal

8/7/2025

Zitadel - 503 issue

Can any one guide on how Zitadel session is working and when the /api/auth/_log call is happening, because whenever this api is calling we are facing 503 issue in our application, can any one has any idea

Arnau

8/6/2025

Help on OIDC logout to terminate session on OpenID Provider

Use-case: 1 tenant = 1 ZITADEL Org, each Org has its own OIDC IdP (ZITADEL as RP, external OpenID Provider) Environment: Self Hosting Version: 3.3.0 Stack: K8S on EKS, RDS postgres, microservices, ZITADEL TypeScript login V2 ...

Previous Next