[SOLVED] OpenID authentication with Microsoft Entra ID (Formerly Azure AD) Error Request failed (500)

[ziadarafat]

• My goal is to setup authentication with Microsoft Entra ID for my organization.
• I am following the instructions on this older forum post https://forum.proxmox.com/threads/p...id-redirect-failed-request-failed-500.108977/
• I am also referencing the documentation page https://pve.proxmox.com/wiki/User_Management under Authentication Realms - OpenID Connect
• However when I logout and attempt to login with the Realm it does not redirect to microsft login and it just gives me the error:

  • OpenID redirect failed. Request failed (500)

• here is my configuration
• When I manually access the url with "/.well-known/openid-configuration" at the end I get json data but it looks pretty normal.
  • I don't see any errors at least and it lists information.
• Is there a way to debug this issue? Has something changed about the process that is not listed in that older forum post?

 

[ziadarafat]

TL;DR: Fix the DNS settings

We resolved the issue. After carefully reviewing the log files, we identified that there was a DNS error causing the authentication as well as other functions that need the web to not work. The solution was to go to the dashboard of each node and correctly set the DNS server IPs.

The reason it was bad to begin with was because we migrated from another building and the router DHCP was pointing to a local DNS server that no longer existed. So proxmox auto configured this from the router.

 

[ebarrere]

Thanks, this is helpful! Could you share some troubleshooting tips that you learned in tracking this down? I am having a similar issue and I don't even know what logs to check or where to look (though I have validated DNS as you advise above)

 

[ebarrere]

For anyone else who might stumble upon this I found the answer here.

TL;DR: Proxmox auto-appends /.well-known/openid-connect — remove it from the URL so it looks like this:

https://login.microsoftonline.us/${TENANT_ID}/v2.0