Authentik OpenID failing with OpenID redirect failed. Request failed (500)

PhilC

New Member
Jun 27, 2024
7
0
1
Running Docker on a Proxmox Cluster (all latest production versions).

On the Docker I have running: ActualBudget, Paperless, Portainer, Authentik, NPM Proxy Manager, and so on…

Authentik is up and working with ActualBudget, Paperless and Portainer.

When I try and login using OpenID on Proxmox I get “OpenID redirect failed. Request failed (500)

My Realm on the Proxmox Cluster is setup is attached...

I have not made any configuration changes to NPM Proxy Manager since installing Authentik (except to ad the Authentik Host Domain)

I have followed the official Authentik Documentation to set-up Proxmox Authentication, with my Redirect URI being https://pve.xxxxxx.xxx (without a port). NPM provides the port when it redirects pre.xxxxxx.xxx

I am using the self-signed Certificates that Authentik generated for signing the Key.

I have tried everything I can think of, and searches of the Internet have not found a solution.

Is the problem that I am using Authentik’s self-signed certs; or have I missed an NPM configuration change that is needed? One observation is that this is the only docker-external app that I want Authentik to authorise.

As all my other “docker” apps are working so I feel it is Proxmox specific problem, but 1000’s of other people must have a similar set-up working.

All help appreciated as I am fed up with banging my head on my screen :-)

1740484602079.png
 
Make sure that proxmox is able to find your idp by its hostname.

In my case, because I don't have a DNS record yet for my idp, so I edited /etc/hosts:

Code:
10.0.0.20  authentik   authentik.lab.example.com