ZITADEL

ZITADEL - Identity infrastructure, simplified for you.

Join

ZITADEL

ZITADEL - Identity infrastructure, simplified for you.

Join

questions-help-bugs

product-feedback-requests

pbechliv

2/24/2025

Link same external IdP to multiple Users

I have the use case where I have in different organisations different user objects that share the same email address. Based on the organisation scope the user logs in to the correct organisation. What I want to achieve is that the user can log in with the same IdP to these different organisations, but it seems that after I link the IdP to one user then I cannot do it anymore for the user in the other organisation. Do i have to find an alternative or is there a workaround to achieve the desired behavior?...

SebastianB

2/24/2025

Authentication issues after password check

We get sometimes client feedback that after they entered username & password they are not logged in to our mobile app but rather get redirected to the login screen. When I check those cases I always see that the password check succeeded, but no token is generated (see screenshot 1). How can I check those cases?

wim

2/23/2025

cors on localhost

I have the feeling I'm missing something stupid or this question has been answered but I can't seem to find the answer... Use-case: A simple web application using plain Html/JS/CSS Environment: Local dev env (localhost) Version: v2.66.1...

ianmuhia

2/21/2025

unable to create account

Zitadel says account already existing while i try to login with a different org

boblack_zocker

2/20/2025

Performance breaks by unknown reasons

Hello, our production self-hosted zitadel is doing misterious things in the kubernetes. Out of nowhere he start big read/write operations and by that it stops working for about 5minutes till the process is done and then it functions normally again. is it doing some kind of maintance in the background or why is it doing that?

kevinight

2/20/2025

ERROR: Failed to extract ServerMetadata from context

hi everyone, i've searched in discord and github already but couldn't find answer: Environment: Self Hosting Version: v2.67.2...

kevinight

2/19/2025

Indefinite migration already started for zitadel setup job

hi everyone, i'm having trouble with this. could anyone offer some advice? thanks!

_thegoldenegg_

2/16/2025

How to get access tokens using Basic auth

Hey, I'm trying to automate API testing for my app, however, some endpoints require authorization and get the user data, I'm trying to automate the login process, however, I couldn't find a helpful tutorial on that, I created a basic auth application in zitadel, however by looking in the tutorials I found that I need to send the clientId and clientSecret in the Authorization header, there is no mention of username and password, is there a way to do that ? I tried using the password grant_type bu...

cris

2/13/2025

Can't start zitadel >= 2.66.0 with cockroach 23.2.0

With a simple docker compose configuration Zitadel fails to start with this error Error: unknown function: eventstore.commands_to_events() (SQLSTATE 42883)

2/13/2025

Pinning zitadel instance versions

We're curious about the update patterns of the hosted zitadel instances in zitadel cloud. Are those typically kept in line with the latest tagged docker release? Is there a way to pin them to a specific version and manage the updates more closely?

2isprime

2/13/2025

Generating JWT for human user

I am using Zitadels Session API to validate the users. The requirement now is tio have a way for the client to validate these tokens locally without calling the Zitadel API's to avoid calls to validate the token before evry action. Since Zitadel Session tokens can only be validate at server side, I was looking for a solution if we can validate them locally (just call the Zitadel for checkign if the token is revoked) ...

BenTal

2/11/2025

SSO for NGO - HELP

Hello everyone. I am Ben. I am asking here directly in the forum as I have been looking around. We are an NGO and currently have a Laravel backend for a platform where we have integrated login with email and 2FA with email one-time code. Now we are getting a new publishing platform sponsored and somehow I would like to have the same login credentials for both platforms. Do you know if it is a big deal to install Authentik and how much "manpower" this would require? Because the Laravael Platform (Platform 1) is launching soon, so maybe it would make sense to do it before it goes live and for the other platform (so platform 2) it might make sense to already use SSO to have a single account and not 2 accounts or whatever other options. The hosted version is just too expensive for us as we have about 2-2,5 million free readers (unique users) every year and even if just 50% of the returning visitors would sign up that would be tens of thousands of active users and this is why we are looking into a self-hosted version on a VPS (we get discounts there) ...

2/10/2025

expirationDate on session missing

Hello, I am working through building a custom login form, and I've ran into an issue where when I am calling into GET /v2/sessions/:session_id it is returning session objects without expirationDate set. Is that expected in some cases? Or is it a bug? Thank you.

Ebram

2/7/2025

Token Introspection for Session Tokens

I was wondering how one exchanged a session token for an access token as stated here https://zitadel.com/docs/guides/integrate/login-ui/session-validation#token-introspection...

pbechliv

2/7/2025

Which to use: @zitadel/node or @zitadel/client

Hello there! I would have one question as we have started the implementation in our node backend to communicate with the Zitadel instance through the management API. I have seen in the documentation that there are technically two Node libraries that we can use for that @zitadel/client https://github.com/zitadel/typescript/tree/main/packages/zitadel-client...

veinnotnice

2/7/2025

Hello Guys,

Hi, I'm trying to create a service user from my frontend (not through the Zitadel console). However, the issue I'm facing is that my token is only an id_token, which means when I pass it to my custom API (which then uses the token to make API calls), it is not considered valid. I also attempted a token exchange, but that didn't work for me either. Could you help me troubleshoot this issue?...

JayPe

2/6/2025

OIDC Generic Provider - Failed to extract ServerMetadata from context

When adding a generic OIDC provider to my Zitadel instance. Trying to refresh the login UI, I see the specific log in my zitadel container: Failed to extract ServerMetadata from context ...

pbechliv

2/6/2025

Updating Organization Logo / Icon through the API

Is it currently possible to update the logo and the icon of an organization through the API? I couldn't find it in the documentation and it would be crucial for our work flow. The problem is that currently our customers have the ability to set their logos through our platform and we would need to propagate the change to Zitadel for the login page branding to be correct....

nlu

2/5/2025

Problem with upgrade from 2.66.1 to 2.67.6

Selfhosted Zitadel user with docker compose with an external PostgreSQL database here. I just tried upgrading in two steps from 2.66.1 to 2.66.9 and from there to 2.67.6. Only in the second step I realized that there was an error in the migration, so I am not sure whether it occured already when I upgraded to 2.66.9. The error occured in a migration step mentioning "40_init_push_func_v4" which kept being repeated. ...

Ramsai

2/5/2025

Session terminated, session.token.removed events missing in event search API

Hi team, I am looking to get active sessions of a user from events storage. I am using the API https://zitadel.com/docs/apis/resources/admin/admin-service-list-events. Here is the body that I am using to send the request , ``` { "eventTypes": [...

Previous Next