NGINX Plus OIDC troubleshooting for Identity Providers.
Note:
Please update any questions and answers whenenver anyone get customers' issues or questions.
- Common Troubleshooting for NGINX OIDC and All IdPs
- Troubleshooting for NGINX OIDC and Amazon Cognito
- Troubleshooting for NGINX OIDC and Auth0
- Troubleshooting for NGINX OIDC and Azure AD
- Troubleshooting for NGINX OIDC and Keycloak
- Troubleshooting for NGINX OIDC and Kubernetes
- Troubleshooting for NGINX OIDC and Okta
- Troubleshooting for NGINX OIDC and OneLogin
- Troubleshooting for NGINX OIDC and Ping Identity
Any errors generated by the OpenID Connect flow are logged to the error log, /var/log/nginx/error.log. Check the contents of this file as it may include error responses received by the IdP. The level of detail recorded can be modified by adjusting the severity level of the error_log directive.
- 400 error from IdP
- 500 error from nginx after successful authentication
- Authentication is successful but browser shows too many redirects
- Logged out but next request does not require authentication
- Failed SSL/TLS handshake to IdP
- How to ensure that Amazon Cognito correctly set up before configuring your app or NGINX Dev Portal?
- How to troubleshoot when PKCE is not working with Amazon Cognito?
- How to troubleshoot when none-PKCE is not working with Amazon Cognito?
- How to troubleshoot when logout is not working with Amazon Cognito?
- How to troubleshoot when dns server is not responding?
- How to troubleshoot when logout is not working with Amazon Cognito?
- How to troubleshoot when
prefered_usernameis not shown in Dev Portal UI? - How to troubleshoot when a frontend OIDC simulation tool is not working with
X-Client-Id should be in cookie. when signing-in after signed-out? - How to troubleshoot when
_codexchreturnserror_description=invalid_scope?
- How to ensure that Auth0 correctly set up before configuring your app or NGINX Dev Portal?
- How to troubleshoot when PKCE is not working with Auth0?
- How to troubleshoot when none-PKCE is not working with Auth0?
- How to troubleshoot when logout is not working with Auth0?
- How to troubleshoot when dns server is not responding?
- How to troubleshoot when a frontend OIDC simulation tool is not working with
X-Client-Id should be in cookie. when signing-in after signed-out?
- How to ensure that Azure AD correctly set up before configuring your app or NGINX Dev Portal?
- How to troubleshoot when PKCE is not working with Azure AD?
- How to troubleshoot when none-PKCE is not working with Azure AD?
- How to troubleshoot when logout is not working with Azure AD?
- How to troubleshoot when dns server is not responding?
- How to troubleshoot when a frontend OIDC simulation tool is not working with
X-Client-Id should be in cookie. when signing-in after signed-out? - How to troubleshoot for the Azure AD's error response with
AADSTS9002327(Tokens issued for the 'Single-Page Application' client-type may only be redeemed via cross-origin requests)?
- How to ensure that Keycloak correctly set up before configuring your app or NGINX Dev Portal?
- How to troubleshoot when PKCE is not working with Keycloak?
- How to troubleshoot when none-PKCE is not working with Keycloak?
- How to troubleshoot when logout is not working with Keycloak?
- How to troubleshoot when dns server is not responding?
- How to troubleshoot when a frontend OIDC simulation tool is not working with
X-Client-Id should be in cookie. when signing-in after signed-out? - How to troubleshoot when keycloak is not running on Docker container?
- How to ensure that Okta correctly set up before configuring your app or NGINX Dev Portal?
- How to troubleshoot when PKCE is not working with Okta?
- How to troubleshoot when none-PKCE is not working with Okta?
- How to troubleshoot when logout is not working with Okta?
- How to troubleshoot when dns server is not responding?
- How to troubleshoot when a frontend OIDC simulation tool is not working with
X-Client-Id should be in cookie. when signing-in after signed-out?
- How to ensure that OneLogin correctly set up before configuring your app or NGINX Dev Portal?
- How to troubleshoot when PKCE is not working with OneLogin?
- How to troubleshoot when none-PKCE is not working with OneLogin?
- How to troubleshoot when logout is not working with OneLogin?
- How to troubleshoot when dns server is not responding?
- How to troubleshoot when a frontend OIDC simulation tool is not working with
X-Client-Id should be in cookie. when signing-in after signed-out?