You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Single sign-on keeps the issuer exactly as entered
Fixed
An OIDC provider's Issuer URL is saved exactly as entered. MikroDash removed its trailing
slash, so providers whose issuer ends in "/", such as Authentik
(https://host/application/o/<slug>/) and Auth0, refused every sign-in with "the provider's
metadata declares a different issuer". If yours was affected, edit the provider, paste the
issuer again with its trailing slash, and save. Reported in #159, thanks @zsaat14.
Changed
Saving a provider checks its issuer. If the provider's published issuer differs from the
one entered, the save is refused and the form shows the exact value to use. A provider that
cannot be reached yet is still saved.
When sign-in is refused for an issuer mismatch, the server log now shows both values.