ZITADEL

Z

ZITADEL

ZITADEL - Identity infrastructure, simplified for you.

Join

questions-help-bugs

product-feedback-requests

Error when login with google

I'm using Login V2 and the TypeScript template for the custom login page. Logging in with email and password works correctly. The issue occurs when I try to log in with a Google account. After selecting the Google account and successfully logging in, I'm redirected to the/idp/google/success page, which shows a successful login message. However, immediately after that, I'm redirected again to accounts.google.com/o/oauth2/v2/auth/oauthchooseaccoun to choose a Google account. This creates an infinite loop. Could someone please help me resolve this issue? Thank you all very much in advance!...

[Bug]: Role deletion/update fails when role key contains a slash (/) – returns 404

The API should handle URL-encoded role keys (e.g., keys containing /) correctly. When a role key like test/abc/app is encoded as test%2Fabc%2Fapp in the URL, the server should correctly decode and process it.

Project Grant Deactivation Access Restriction

Hello, I'm looking to confirm if the following behavior is expected: Deactivating a project grant for an organization does NOT remove access to that project for all users in the organization. - If the above statement is true, is there another way to holistically remove access to a project for all users of an organization without having to deactivate every user's grant?...

Actions v2 on v3.1.0 returning [internal] An internal error occurred (QUERY-y2u7vctrha)

Upgraded recently from v2.67.2 to v3.1.0 locally on docker compose. Tried adding a target and an action. After an action was added, I started getting [internal] An internal error occurred (QUERY-y2u7vctrha) and im not able to see my action that was added. Its not being triggered either

Error when connection to Zitadel console

Hi everyone, I'm getting this error when trying to connect to the admin console, any idea ? have a great day...
No description

How to Allow Same Google User in Multiple ZITADEL Organizations?

Hi! I'm facing an issue with Google login in ZITADEL. I have two organizations (for ArgoCD and Grafana), each with its own Google IDP configured at the org level. When I log in with the same Google account, it registers in one org but fails in the other with "User already exists" error. How can I allow the same Google user to exist across multiple orgs?...

Notifier errors since upgraded to 3.0.4

Hello! I am looking for help to understand and debug an issue I have with my Zitadel service. I recently upgraded my self-hosted Zitadel instance from 2.63.4 to 3.0.4 and since then I am getting recurring errors related to some Notifier resource. ...

Organization with only external provider login redirecting to type in password

Hello, I created a organization and i want them only to log in via external provider like microsoft activedirectory. the thing is that when i create a new user he gets redirected to the organization auth page and has to type in a password even if i have disabled password entry. only if i press the back button i get redirected to the external identity. this looks uncommon for me. shouldnt the user be directly redirected?
No description

Locked out of instance

I've managed to lock myself out of an instance and here's how ... Requirement is to have users register with both an email address and phone number and to have on-time verification of both. So to test that i attempted to set the instance defaults to use SMS 2-Factor verification. After saving the changes i logged out of my app and when i attempt to login it now asks for my phone number which is great, but i never get the SMS code - presumably because i never setup Twilio. So i'm locked out of th...

GetUserGrantByID for granted projects not working

Hello, i am trying to get the user roles from a user but its not working. I am using the GetUserGrantByID call. i give to the call the userid and the resourceId of the project but all i get is: {"Status(StatusCode="NotFound", Detail="User grant not found (QUERY-wIPkA)")"} The user has roles in this project for sure. what am i doing wrong?...

Can i move Users from OrgA to OrgB.

Hello, is it possible to move Users from OrgA to OrgB and keep the id and everything roles ect.?

Creating local user in Zitadel V3

Hey, so I recently upgraded to V3. Everything is well, however, when I create a local user in a specific organization, the user is still only created in the default org. Whys this? And how can I make it so it’s created in the specified organization? Since there is also no way to move a user to a different org.

Userinfo endpoint not returning all roles from all Role Audiences

When requesting the /userinfo endpoint using an access_token with the following scopes: openid profile email urn:zitadel:iam:org:project:id:zitadel:aud urn:zitadel:iam:org:project:id:<PROJECT-ID-1>:aud ...

Is there a way to have multiple microsoft identity provider but just 1 button instead of x buttons

Hello, i have a selfhosted zitadel and my customer have own identity providers that they want to have included. but for the moment if i add their identity provider as external identity on the main page there is added a button for that provider. so i would have a lot of buttons there. is there a way to change that?

v2beta/actions/* 404 with Actions V2 feature enabled

Hello, I realized I am still using the /v3alpha/actions/* endpoints and I went to switch to v2beta, but it seems all of the endpoints return 404: ```...
No description

Migrating from CRDB to PGSQL

Has anyone migrated from cockroach DB to Postgres for Zitadel running via docker? I’ve been trying but have been unsuccessful. Any guidance would be much appreciated!

Limiting access based on roles

I’m curious if I there is a dropdown or something in the UI I can use to limit access to an application or project based on user roles? Recently saw this implemented in pocket-id and would like a similar implementation....
No description

"UNABLE_TO_VERIFY_LEAF_SIGNATURE" Error 403 Forbidden

Hello i added a external microsoft identity provider into my Zitadel. Now i got a problem because in my Local Test Zitadel everything works fine with the External identity but on production i get a certificate error. What could the problem be? it normally gets the token and keys but when i do the api call it failes. on my local test zitadel it works.
No description