AD Oauth setup returns with "Invalid OAuth state, try again"

[suedeyoung]

Ask a Question!

Hey guys!

I have been configuring the Portainer to use the OAuth authentication with Entra ID (previously Azure AD) and I'm running into a weird little thing. Dug into it for a few hours and nothing I found seems to be directly related to what I'm experiencing.

So the first time we log into the SSO, Portainer's login page will give the following error:
Invalid OAuth state, try again.

However, when clicking the login button again, it goes through the authentication and works without any issues so it's only during the first time of logging in. I attempted to turn on the debug log but nothing is logged when replicating the issue.

It's not a huge issue, but it's more of an extra step that is slightly annoying. Has anyone else run into this before?

[Nick-Portainer]

Hey, thanks for this. Can you let me know what version of Portainer you are running? e.g Portainer BE 2.19.1 etc so I can try and replicate this myself, also confirming you followed our offical documentation when setting up your AAD to Portainer? - https://docs.portainer.io/admin/settings/authentication/oauth