Vaultwarden SSO

[dancgn]

Hi there,
did someone managed to get Vaultwarden SSO running?

{"message":"Failed to discover OpenID provider: Request failed","validationErrors":{"":["Failed to discover OpenID provider: Request failed"]},"errorModel":{"message":"Failed to discover OpenID provider: Request failed","object":"error"},"error":"","error_description":"","exceptionMessage":null,"exceptionStackTrace":null,"innerExceptionMessage":null,"object":"error"}

I'm sorry, but I didn't understand it...

https://github.com/dani-garcia/vaultwarden/wiki/Enabling-SSO-support-using-OpenId-Connect

Thanks you in advance
Daniel

[aburgd]

I was also running into this issue. You need to add the /oidc to the end of your ${SSO_AUTHORITY} in your Vaultwarden config.

If you look at the endpoints in VoidAuth, the well-known endpoint (/oidc/.well-known/openid-configuration) returns the correct content-type. Vaultwarden is only adding the /.well-known/openid-configuration to the ${SSO_AUTHORITY} which is nothing.

[dancgn]

SIGNUPS_ALLOWED=false
SSO_ENABLED=true
SSO_AUTHORITY=https://void.example.com/oidc
SSO_CLIENT_ID=imtheclientid
SSO_CLIENT_SECRET=imthesecret
SSO_SCOPES="openid email profile"
SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION=false
SSO_CLIENT_CACHE_EXPIRATION=0
SSO_ONLY=false # Set to true to disable email+master password login and require SSO
SSO_SIGNUPS_MATCH_EMAIL=true

That's the part of my env