Removing IDPs fails

I'm trying to remove IDPs using V1 APIs but they don't seem to be working on our self-hosted v2.71.11. We are not at a stage for upgrading to v4, however I've reproduced this issue on that version as well.

How do I remove an IDP that has been added to my organization?

Here is a response for some of my active identity providers:

{
  "data": {
    "attributes": [
      {
        "id": "347758644164559325",
        "name": "MockSAML",
        "type": "IDENTITY_PROVIDER_TYPE_SAML"
      }
    ]
  }
}

{
  "data": {
    "attributes": [
      {
        "id": "347758644164559325",
        "name": "MockSAML",
        "type": "IDENTITY_PROVIDER_TYPE_SAML"
      }
    ]
  }
}

{
  "data": {
    "attributes": [
      {
        "id": "347758644164559325",
        "name": "MockSAML",
        "type": "IDENTITY_PROVIDER_TYPE_SAML"
      }
    ]
  }
}

{
  "data": {
    "attributes": [
      {
        "id": "347758644164559325",
        "name": "MockSAML",
        "type": "IDENTITY_PROVIDER_TYPE_SAML"
      }
    ]
  }
}

But removing it with that id fails

rpc error: code = NotFound desc = Identity Provider Configuration doesn't exist (QUERY-rhR2o)

rpc error: code = NotFound desc = Identity Provider Configuration doesn't exist (QUERY-rhR2o)

rpc error: code = NotFound desc = Identity Provider Configuration doesn't exist (QUERY-rhR2o)

rpc error: code = NotFound desc = Identity Provider Configuration doesn't exist (QUERY-rhR2o)

api.ManagementService().RemoveOrgIDP(ctx, &managementRequests.RemoveOrgIDPRequest{
            IdpId: idpId,
        })

api.ManagementService().RemoveOrgIDP(ctx, &managementRequests.RemoveOrgIDPRequest{
            IdpId: idpId,
        })

api.ManagementService().RemoveOrgIDP(ctx, &managementRequests.RemoveOrgIDPRequest{
            IdpId: idpId,
        })

api.ManagementService().RemoveOrgIDP(ctx, &managementRequests.RemoveOrgIDPRequest{
            IdpId: idpId,
        })

This feels related to the issue questions-help-bugsListing IDPs sends an empty response where listing IDPs returns an empty response.

Ask Inkeep•11/26/25, 2:20 PM

Hi @Billy, I'm an AI assistant for ZITADEL. While a team member reviews this question, I'll see if I can find relevant sources for your question.

Ask Inkeep•11/26/25, 2:20 PM

Answer

I wasn't able to find a direct answer, here are some relevant sources:

Remove Identity Provider (IDP) : This V1 Management API endpoint is deprecated and removes an identity provider permanently from an organization (1) .
Getting 404 trying to regenerate SAML IDP Certificate : A similar "Identity Provider Configuration doesn't exist" error was resolved by ensuring the correct API (Management vs Admin) was used and including the x-zitadel-orgidx-zitadel-orgid header when the service user lives in a different organization than the IDP owner (2) .

Ask Inkeep•11/26/25, 2:20 PM

To learn more, see the sources I considered:

[1] Remove Identity Provider (IDP)
[2] Getting 404 trying to regenerate SAML IDP Certificate

Ask Inkeep•11/26/25, 2:20 PM

Feel free to tag @Ask Inkeep with additional questions.

AAsk Inkeep To learn more, see the sources I considered: [[1] Remove Identity Provider (I...

Ask InkeepAPP•11/26/25, 2:21 PM

Got it. Tagging @Rajat for additional help.

Rajat•11/27/25, 12:03 PM

hey @Billy same behaviour for me, I have reported it and will get back to you

nullsenseOP•11/28/25, 3:49 PM

@Rajat Would it be helpful to open a bug on the issue board? I can do that if so, lmk

Rajat•12/2/25, 11:05 AM

hey @nullsense I am looking into this with another engineer atm, we will get back to you on it. Thanks

nullsenseOP•12/11/25, 6:34 PM

Bump

Rajat•12/12/25, 9:02 AM

hey @nullsense same problem with me when I try it. I have informed this already actually and the fix is bring worked.
I am also still hitting the same issue when I try in go