ZITADEL

ZITADEL - Identity infrastructure, simplified for you.

Join

ZITADEL

ZITADEL - Identity infrastructure, simplified for you.

Join

questions-help-bugs

product-feedback-requests

Weltenbrand

3/31/2025

Mover server

Hi, I am running zitadel in a docker-compose setup on server A. I want to run it now on server B (with a different domain). I assumed everything would be stored in the Postgres database and I only need to dump and restore. This gives "Errors.App.NotFound" in the browser. What would be the correct way?...

tfmm

3/28/2025

Upgrade from 2.70.x to 2.71.x fails with migration errors

When upgrading from 2.70.7 to 2.71.5 running in docker from the official GHCR image, I get this error, and the container fails:

time="2025-03-28T17:41:50Z" level=info msg="starting migration" caller="/home/runner/work/zitadel/zitadel/internal/migration/migration.go:66" name=52_idp_templates6_ldap2
time="2025-03-28T17:41:50Z" level=error msg="migration failed" caller="/home/runner/work/zitadel/zitadel/internal/migration/migration.go:68" error="ERROR: relation \"idp_templates6_ldap2\" already exists (SQLSTATE 42P07)" name=52_idp_templates6_ldap2
time="2025-03-28T17:41:50Z" level=fatal msg="migration failed" caller="/home/runner/work/zitadel/zitadel/cmd/setup/setup.go:304" code=42P07 detail= error="ERROR: relation \"idp_templates6_ldap2\" already exists (SQLSTATE 42P07)" hint= message="relation \"idp_templates6_ldap2\" already exists" name=52_idp_templates6_ldap2 severity=ERROR

time="2025-03-28T17:41:50Z" level=info msg="starting migration" caller="/home/runner/work/zitadel/zitadel/internal/migration/migration.go:66" name=52_idp_templates6_ldap2
time="2025-03-28T17:41:50Z" level=error msg="migration failed" caller="/home/runner/work/zitadel/zitadel/internal/migration/migration.go:68" error="ERROR: relation \"idp_templates6_ldap2\" already exists (SQLSTATE 42P07)" name=52_idp_templates6_ldap2
time="2025-03-28T17:41:50Z" level=fatal msg="migration failed" caller="/home/runner/work/zitadel/zitadel/cmd/setup/setup.go:304" code=42P07 detail= error="ERROR: relation \"idp_templates6_ldap2\" already exists (SQLSTATE 42P07)" hint= message="relation \"idp_templates6_ldap2\" already exists" name=52_idp_templates6_ldap2 severity=ERROR

...

JoseSzycho

3/28/2025

Automating Zitadel Configuration Without Manual UI Interaction or API Calls

Hi, we are setting up our dev environment using docker, and need to configure some Zitadel settings without any manual interaction through the UI. Specifically, we need to set up pre-access token creation, Google and GitHub IdPs, and other configurations. What approach are you using? We want to automate these tasks but prefer not to rely on code to call the APIs....

cris

3/28/2025

Document updating process of Zitadel

Hey everyone, I just had a chat with @Raccine for evaluating the onboarding process of Zitadel. I remembered that I could find any mention about some conventions regarding migrations and updating Zitadel. Specifically, when upgrading from X.Y.Z to X.Y+W.Z+K, what’s the recommended approach? ...

Wolfbergen

3/27/2025

Org Owner cannot see all users

Hello, I have a problem since I migrate from 2.71.2 to 2.71.4 last week. My user is the IAM Owner and Org Owner of all organizations we have, and I can only see my user in the Users tab of my org, I cannot see others users. I can see them in the Authorizations tab and see users' profiles from there, I can authorize them in projects and give them a role. Rollback to 2.71.2 doesn't change anything. It's the same for all Org Owners and if I grant a new user Org Owner. Is there a permission, a table/schema that changed recently ?...

boblack_zocker

3/27/2025

"UNABLE_TO_VERIFY_LEAF_SIGNATURE" Error 403 Forbidden

Hello i added a external microsoft identity provider into my Zitadel. Now i got a problem because in my Local Test Zitadel everything works fine with the External identity but on production i get a certificate error. What could the problem be? it normally gets the token and keys but when i do the api call it failes. on my local test zitadel it works.

Shengael

3/26/2025

Best Practices for Managing Public Domains in a B2B Organization Model

Hello 👋 I'm building a B2B solution where each client gets their own organization based on their domain (e.g., client.com). The idea is to automatically create a new organization for each detected domain. Problem:...

SebastianB

3/25/2025

Entra SAML connect existing Zitadel accounts

I have setup Entra SAML as IdP for an organization according to the example of Zitadel (https://zitadel.com/docs/guides/integrate/identity-providers/azure-ad-saml). It seems to work to connect, but I always get the message that external user account is not found, even though I specified the email as matching criteria and the e-mail I test exists in the organization I selected. Afterwards I get to another Login form that asks me to connect to an account and I need to login again. However, I don't want to manual link accounts by my users....

Arnau

3/22/2025

Zitadel TypeScript login: Issues Enabling HTTP/2 for gRPC with Zitadel in K8S (ALB Ingress)

Hi everyone, We’re onboarding the Zitadel TypeScript project in our Kubernetes setup (zitadel-typescript-login), but we’ve run into an issue with enabling HTTP/2 support while keeping compatibility with other services. Our Setup...

notfoundium

3/21/2025

User metadata does not appear in the token

Good day. I am currently using the self-hosted Zitadel, and I have a problem with the metadata in the id_token. I'm relying on the information in the documentation(https://zitadel.com/docs/guides/manage/customize/user-metadata). In order for the metadata to appear in the user's id_token, I need to set in the application settings "User info inside ID token", and I did it in my React app (pic. 1). I have set the specific user's metadata using the API via Python requests, and looks like it was succ...

LC Labs

3/21/2025

panic: runtime error: invalid memory address or nil pointer dereference

Good morning. I'm setting up zitadel on GCP, and I encounter this error regurally. Do you have any idea what might cause it? ``` panic: runtime error: invalid memory address or nil pointer dereference...

Nik

3/21/2025

Revoking Active Sessions and Tokens

I have recently updated a user's email address and would like to revoke all active sessions and tokens associated with their account. Could you please confirm if there is an API endpoint available for this purpose using a service user token?

BenTal

3/20/2025

Looking for Help Setting Up Zitadel

Ok, finally we got a solution with hosting, backup etc. which is managable for our budget. But now for the next steps we still need help. The goal is to have a universal login page for our NGO to authenticate users across two different services. We have a managed self-hosted Zitadel instance running and now need help with setting everything up the right way. - Setting up and customizing the login page ...

Elmond

3/20/2025

Zitadel Fails DB Migration

Hello, I use Zitadel on Docker on a Debian 12 VPS. As database I have a Docker backed CRDB container. I have automatic updates through Watchtower on both. A month ago or so, after 2.69, I had the problem that some others had of the startup DB “verify migration” failing due to timeout. I kept 2.67.1 installed until yesterday, when CRDB started giving me problems. Now everytime I start Zitadel (also tried starting it with the DB mirroring to Postgres config) I get an error at startup, again, during DB verification and, then, another error that states Zitadel cannot connect to CRDB....

maksim.khardin

3/19/2025

Handling of deleted users

Hi, I have a question regarding user deletion - I can see that if you delete the user via console, you can create a new user with the exact same email, but a different user id Documentation states, that deletion sets the user's state to deleted, and the UI has a filter for user.state=DELETED, but it does not seem to return anything, and neither does the v2/users/{:userId} handle. So, my question is - what actually happens to the user's data (I'm also curios about it in the context of GDPR compliance)? Is there a way to access it via API?...

hypebeast18

3/18/2025

Access / refresh tokens

Currently im writting frontend with zitadel. And i faced with problem that i dont know how works tokens (access and refresh). I need make frontend that i login/signup and after that get tokens, write it in the cookies and use access when i gotta make a request. And use refresh when i gotta revalidate access. But i dont know how to get these pair of tokens and how it works. Could you explain me how it work plz

Perditus

3/18/2025

Fetch a List of users in a WebApp

Hello Zitadel Team! 👋 I am using a Self-Hosted instance of Zitadel and I was wondering If I could possibly fetch a list of all available users in the Organization so a possible function like: Dropdown to choose a user responsible for something or whatever. I am trying this: ...

hypebeast18

3/17/2025

How to setup own form in frontend instead of Zitadel's form

I wanna use my own form to log in my app

hypebeast18

3/17/2025

How to manage time of access and refresh tokens?

tamis0583

3/15/2025

Refresh token working, but still getting logged out!?

I implemented refresh tokens in React with signInSilent which works when I set the ttl on the access token to 1 minute for example. So I thought everything is great, but when I set the access token ttl to 1 hour and the refresh token ttl to 31 days I would expect the user to have to login once a month. However the next day I'm forced to login again. I don't understand why this is happening and I'm wondering if it has something to do with Zitadel itself??...

Previous Next