HankH
ZITADEL4w ago
Hank

SamlRequest contains port 443 in all messages

Zitadel 4.6.6
As per the subject, when we look at the SamlRequests we see that Zitadel has added :443 to all URLs for ACS, EntityId, etc. However, in the console when looking at the IdP URLs they are shown without the port. This causes the login to fail due to strict check.

Config has been tried with both ExternalPort set to 443 and not set, ExternalDomain and ExternalSecure are also both set (custom domain and true respectively)

We have looked through NGINX config and we do set the recommended headers from what we can see, anything else we should look into?
Was this page helpful?