1.2 KiB
title, description, contentType
| title | description | contentType |
|---|---|---|
| Troubleshooting for OIDC SSO | Things to be aware of and troubleshooting OIDC within n8n | howto |
Troubleshooting OIDC SSO
Known issues
State parameter not supported
When using OIDC providers that enforce the use of the state CSRF token parameter, authentication fails with the error:
{"code":0,"message":"authorization response from the server is an error"}
n8n's current OIDC implementation doesn't handle the state parameter that some OIDC providers send as a security measure against CSRF attacks.
For now, the only work around is to configure your OIDC provider to disable the state parameter if possible.
n8n is working on adding full support for the OIDC state parameter in a future release.
PKCE not supported
OIDC providers that require PKCE (Proof Key for Code Exchange) may fail authentication or reject n8n's authorization requests. n8n's current OIDC implementation doesn't support PKCE.
The only work around is to configure your OIDC provider to not require PKCE for the n8n client if this option is available in your providers settings.
n8n plans on adding PKCE support in a future release