Unable to add Entra as an Identity provider #1522

Closed
opened 2026-04-05 19:32:49 +02:00 by MrUnknownDE · 0 comments
Owner

Originally created by @nightchrono on 5/5/2025

Attempting to add Entra as my identity provider. I have the following configuration:

The correct Client ID provided by the App Registration in Entra
Secret provided by the "Client Credentials" section of App Registration
Authorization URL: https://login.microsoftonline.com/MYTENANT/oauth2/v2.0/authorize
Token URL: https://login.microsoftonline.com/MYTENANT/oauth2/v2.0/token

Redirect URL provided by pangolin has been added to "web" platform configuration with "ID tokens (used for implicit and hybrid flows)" as the selection.

Token Configuration has been left at the default.

I manually provisioned the user in pangolin with "username" being their UPN (which is the same as their email)

When they attempt to sign in, they do get to the point where they have to use Microsoft Authenticator, but upon returning to pangolin, they get the error in the attached screenshot:

Image

Playing with a variety of settings (forgive me, I forget the exact configuration, I tried everything I could think of so I don't remember the exact combination) also yielded this error:

Image

Not sure if this is a bug or if I am doing something completely wrong. Any help would be appreciated.

*Originally created by @nightchrono on 5/5/2025* Attempting to add Entra as my identity provider. I have the following configuration: The correct Client ID provided by the App Registration in Entra Secret provided by the "Client Credentials" section of App Registration Authorization URL: https://login.microsoftonline.com/MYTENANT/oauth2/v2.0/authorize Token URL: https://login.microsoftonline.com/MYTENANT/oauth2/v2.0/token Redirect URL provided by pangolin has been added to "web" platform configuration with "ID tokens (used for implicit and hybrid flows)" as the selection. Token Configuration has been left at the default. I manually provisioned the user in pangolin with "username" being their UPN (which is the same as their email) When they attempt to sign in, they do get to the point where they have to use Microsoft Authenticator, but upon returning to pangolin, they get the error in the attached screenshot: ![Image](https://github.com/user-attachments/assets/0ef480dd-dab9-49ff-bf08-784b11446abf) Playing with a variety of settings (forgive me, I forget the exact configuration, I tried everything I could think of so I don't remember the exact combination) also yielded this error: ![Image](https://github.com/user-attachments/assets/73951fba-20bc-47f0-a18a-6f7b558c2e2f) Not sure if this is a bug or if I am doing something completely wrong. Any help would be appreciated.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github/pangolin#1522