ZITADEL

Z

ZITADEL

ZITADEL - Identity infrastructure, simplified for you.

Join

questions-help-bugs

product-feedback-requests

Zitadel - 503 issue

Can any one guide on how Zitadel session is working and when the /api/auth/_log call is happening, because whenever this api is calling we are facing 503 issue in our application, can any one has any idea

Help on OIDC logout to terminate session on OpenID Provider

Use-case: 1 tenant = 1 ZITADEL Org, each Org has its own OIDC IdP (ZITADEL as RP, external OpenID Provider) Environment: Self Hosting Version: 3.3.0 Stack: K8S on EKS, RDS postgres, microservices, ZITADEL TypeScript login V2 ...

Issue with Bitbucket OAuth Integration in ZITADEL

Hi ZITADEL Team, I'm facing an issue while trying to integrate Bitbucket as an OAuth provider within ZITADEL. 🔧 Setup Details:-...
No description

Zitadel v4 High memory usage

Hey there folks 👋 Use-case: I'm currently testing a migration to Zitadel v4. ...
No description

Actions v2 - Function PreUserinfo

I'm trying to use the v2 action and move the PreUserinfo function from the v1 action, but my claims are't being set in the user. I have a webhook response in this JSON format { "set_user_metadata":[], "append_claims":[...

can zitadel selfhost do multiple domain?

I have main instance at accounts.domain1.site and I want to add accounts.domain2.com which is same zitadel instance but other organization not same as accounts.domain1.site how do I do it? I using nginx and npm (nginx proxy manager) with docker compose of zitadel...

v4 local run won't serve ui

Hey there folks, while trying to run the example from the docs on macos, the ui will always 404, is that something known? to run i did ``` ZITADEL_DATABASE_POSTGRES_HOST=localhost ZITADEL_DATABASE_POSTGRES_PORT=5432 ZITADEL_DATABASE_POSTGRES_DATABASE=zitadel ZITADEL_DATABASE_POSTGRES_USER_USERNAME=jayson.reis ZITADEL_DATABASE_POSTGRES_USER_PASSWORD= ZITADEL_DATABASE_POSTGRES_USER_SSL_MODE=disable ZITADEL_DATABASE_POSTGRES_ADMIN_USERNAME=jayson.reis ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD= ZITADEL_DATABASE_POSTGRES_ADMIN_SSL_MODE=disable ZITADEL_EXTERNALSECURE=false ./.devenv/state/zitadel/zitadel start-from-init --masterkey "MasterkeyNeedsToHave32Characters" --tlsMode disabled...

grant_type missing

suddenly getting description: 'grant_type missing', when trying to validate authorization code , any help?

i have mirrored the crdb to psql, but getting some issue after migration, t

postres logs: postgres | 2025-08-05 15:18:18.757 UTC [204] ERROR: duplicate key value violates unique constraint "idp_login_policy_links5_pkey" postgres | 2025-08-05 15:18:18.757 UTC [204] DETAIL: Key (instance_id, aggregate_id, idp_id)=(332018629145001986, 332018629145001986, 332019326171217922) already exists. postgres | 2025-08-05 15:18:18.757 UTC [204] STATEMENT: INSERT INTO projections.idp_login_policy_links5 (idp_id, aggregate_id, creation_date, change_date, sequence, resource_owner, instance_id, provider_type) VALUES ($1, $2, $3, $4, $5, $6, $7, $8)...
No description

Frontend implementation of impersonation using @zitadel/react

Firstly, raised this as an issue so we get a log of this: https://github.com/zitadel/zitadel-react/issues/31 Just wanted to know how to use the token exchange functionality to then reinitiate a frontend session using the impersonated token the backend has issued. Thanks...

Does ZITADEL support session rollback or forced session invalidation?

Hi ZITADEL team 👋 I have a question regarding session management: Does ZITADEL support any kind of session rollback or forced session invalidation? ...

Is there a way to implement or enable 2FA backup codes in ZITADEL?

Hi ZITADEL team 👋 Quick question: does ZITADEL currently support 2FA backup codes — for example, in case a user loses access to their authenticator app? If not natively supported, is there any recommended approach to implement this externally?...

whatsapp

Hi ZITADEL team 👋 I have a quick question regarding 2FA methods. Is it possible to support WhatsApp as a second factor (either directly or via third-party integrations)? Also, can we create a dedicated WhatsApp channel for sending authentication codes or notifications?...

Custom scopes and consent workflow

Hi there, we're evaluating Zitadel as our identity and OpenID Connect provider however as part of our workflow we require the ability to use custom scopes to group custom claims. OIDC clients would then request access to those scopes accordingly and the user would need to grant consent either to the full scope (and in the future we'd like to explore the ability to have granular access to claims). In the docs I've spotted that regarding custom scopes "This feature is not yet released". Does this mean it is currently under development? Can we enable this as a feature toggle to test it at all? How much control over the consent UI will we have? Thanks in advance...

Cannot Access Customer Organization for Management - Permission/Role Issue

Hello Zitadel friends, I'm experiencing an access issue with managing customer organizations in our Zitadel Cloud instance (v3.3.4) and need clarification on the required permissions. Current Setup:...

Missing org_id in AddOrganizationRequest [GO Client] ?

Hi, I'm trying to create an organization with an id (see https://zitadel.com/docs/apis/resources/org_service_v2/organization-service-add-organization) Maybe I'm doing something wrong, but the go client does not have the orgId field defined in AddOrganizationRequest? Go client: github.com/zitadel/zitadel-go/v3 v3.6.1...

How can I modify the footer on the Log in and Log out page?

Is there a way to modify the Log in and Log out page footer in the console?

Zitadel mirror not working

I am getting this below error, zitadel init --config mirror-config.yaml INFO[0000] initialization started caller="/home/runner/work/zitadel/zitadel/cmd/initialise/init.go:70" DEBU[0000] failed to get oid for command type caller="/home/runner/work/zitadel/zitadel/internal/eventstore/v3/eventstore.go:118" error="no rows in result set"...
No description

Login policy corrupting without any logs, bug? (V2.14.)

Hi Everyone, Self hosted zitadel instance on docker's login policy changes automatically without any logs for this change, could it be a bug or there are other ways that could impact the policy without being detected by the logs. Thanks...

Need help understanding Zitadel for large corporations and custom UI

Hi, Im looking into Zitadel to replace our custom identity system. One thing I immediately noticed was that Zitadel is trying to be everything at once and that can be very hard to pull off. On paper it looks like a great option but when I dug deeper I found some nuances. For example we are a well established entity and have front end and mobile application engineers so I wanted to use our own UI, the endpoints for the create user and session require authentication (probably by a service account). So I’ll need another service wrapping Zitadel and handling dos attacks and etc. I don’t get the design philosophy of putting everything behind an API is it because of multi tenant feature? We are B2C so we just have to put up with it not being reproducible?? My other option is Ory Kratos which I believe to be superior in security but slow in features and development. I want something in the middle I like the activity and development on the Zitadel and the integration of Ory. I don’t want a UI to change things I want well thought and secure APIs. It gives me Keycloak vibes. These are all my opinions and feel free to correct me if I’m wrong....