ZITADEL

ZITADEL - Identity infrastructure, simplified for you.

Join

ZITADEL

ZITADEL - Identity infrastructure, simplified for you.

Join

questions-help-bugs

product-feedback-requests

ĐARK々MÁTTER

12/16/2024

How can I create the human users programatically using APIs?

I have 2 organizations and I want to create users in them programatically based on the condition in the csv file, (I dont want to use the import feature because csv requires some transformation). I have tried with converting JSON file to jwt for management, auth and admin users and it didnt work. ```bash go install github.com/zitadel/zitadel-tools@latest ...

Tamil Selvan

12/12/2024

Remove the back button in the LDAP login page, if User Name, Password login is turned OFF

Is there a way to do that?

sp132

12/10/2024

Generated IDs are non-unique

I'm in the process of setting up IaC for our ZITADEL installations, and it seems there is a significant issue with the ID generation process. The problem is severe, as the generated IDs are not unique when multiple resources are created at once, causing consistency issues. I'm not sure what I can do about it, maybe there is something in the configuration or setup process that can help? I'm using the latest version of Zitadel Terraform provider and Zitadel 2.60.2....

JayPe

12/9/2024

When I'm login to the zitadel login ui. I specified a redirect URI like this one : xxx://xxx-callback With the redirect URI, my mobile app can intercept it, and then redirect to the home page of my app. BUT, If I don't wait for the app redirection and click on the next button of the zitadel login ui, I got an error message : ID=CACHE-d24aD Message=Errors.AuthRequest.NotFound Parent=(sql: no rows in result set)...

irieimperator

12/5/2024

Go SDK set "x-zitadel-orgid" header

Based on the API docs, the header “x-zitadel-orgid” is required to scope ex. the request ManagementService().SetOrgMetadata() to an organization. How do I set this using the SDK? https://zitadel.com/docs/apis/resources/mgmt/management-service-set-org-metadata...

11011011

12/3/2024

Actions V2 - Adding claims to token

Hi, is there any available example how to add custom claims to access or ID token using actions V2 API? We need to insert some custom claims that are not available in Zitadel system....

shree_harsha

12/2/2024

How to set session time dynamically with custom login flow?

In my case, for some users, the session should be 24 hours. For others, it should be 30mins. Please let me know if that is possible to implement in custom login flow. If not then how to set some default session time.

irieimperator

11/28/2024

E-Mail as username already taken, user cannot join organization

Scenario We as a company have the following scenario: We offer various online services; most of them are for b2b customers and are paid. Here we simply create one organization per customer, which works wonderfully with zitadel. But we also have a blog (wordpress) where users can register and comment. The blog is intended for everyone, including private individuals or employees of a company that is not a “customer” of ours. Here it is neither possible nor sensible to assign users to a specific organization. Instead, we would create a general “public” organization and assign the users of the blog to it. ...

sp132

11/27/2024

Dismal performance of Users API V2

We have been using the Management API gRPC endpoints for some time and recently decided to try the Users API v2, primarily because of the organization filter. However, the difference in performance is so significant that we find it unusable. The management.v1.ListUsers call takes roughly 1.5 seconds to return 9,800+ results (unpaginated response), whereas users.v2.ListUsers takes 54–56 seconds to complete the same operation. What gives?...

stef

11/25/2024

Where can I find the software version?

Where can I find the software version? In the cloud version, the version was previously always displayed under “Default Settings”. Now the commit ID is displayed instead of the version. I would like to see the version so that I can use the same version in the Docker Compose during development....

ashep

11/22/2024

Errors.SMTPConfig.NotFound failed events

Hello! I have tons of the following messages in the "Failed events section" ```...

ashep

11/22/2024

Getting "User could not be found (QUERY-Dfbg2)" upon session creation for existing user

Hello! I have a self-hosted ZITADEL v2.59.5 installation with Postgres. I have created a user with a username that is unique across the entire instance. When I am calling POST /v2/sessions API with the following payload:...

Raccine

11/21/2024

(🏁 Start here - READ ME!) Forum post template & resources

Prior to publishing any content in the Zitadel forum, please ensure you’ve read our community #guidelines & our forum post guidelines. Below, we’ve added in some templates to make your posting journey easier & to ensure both community members + staff are better equipped to provide you with tailored answers or feedback. Please modify based on the context you’re able to give but ensure your posts are as detailed as possible. 📓 General forum post template for issues

Use-case: Tell us what you’re building / using Zitadel for. ...

jesperwe

11/20/2024

Getting service user metadata in action

If you go to the User settings > Metadata view for a Service User, the form says:

Add custom attributes to the user like the authenticating system. You can use this information in your actions.

However there is no trace of this metadata in the ctx.v1.user object in the actions. ...

TomasP

11/20/2024

Customizing unexpected error pages

When having a multi-instance Zitadel setup with top subdomain as the tenant (instance). We get an error page with an instance not found error, when a user hits a non-existing instance. This page is blank, is it possible to configure to make it more professional looking? This could also be applied to other unexpected errors displayed. Right now we get text i.e.:

unable to set instance using origin &{non-existant.127.0.0.1.sslip.io  http} (ExternalDomain is zitadel.127.0.0.1.sslip.io): ID=QUERY-1kIjX Message=Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains

unable to set instance using origin &{non-existant.127.0.0.1.sslip.io  http} (ExternalDomain is zitadel.127.0.0.1.sslip.io): ID=QUERY-1kIjX Message=Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains

...

maksim.khardin

11/18/2024

HumanUser import timeout

Hi there! I'm trying to test importing users into an existing org to see how zitadel handles that type of growth, and I'm hitting

upstream request timeout

upstream request timeout

after 300 seconds, even though my import json contains

"timeout": "10m"

"timeout": "10m"

Is there any way to go around this? Since I would like to see how zitadel handles ±700-800k users in the org, and current 300 second timeout only lets me import around 750 users...

Weltenbrand

11/18/2024

PAT with traefik

Hi, I use traefik as reverse proxy and want to use Zitadel for authorization stuff. I have some third party services I want to protect with Zitadel, which dont have OICD capabilities. For the web based services I could make it work with oauth2proxy. One of the clients, I use, sends a bearer token to the api endpoint of a service and I hoped to be able to use service users with PATs for this. I was trying to also use oauth2proxy for this. But I always get unauthorized....