DYNR/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-08-05 00:15:26 -04:00
Code Issues 23.5k Packages Projects Releases 10 Wiki Activity

[GH-ISSUE #5059] No External IDP in self hosted #9807

New Issue
Open
opened 2026-08-05 01:23:32 -04:00 by saavagebueno · 8 comments
saavagebueno commented 2026-08-05 01:23:32 -04:00
Owner
Copy Link

Originally created by @1nerdyguy on GitHub (Jan 7, 2026).
Original GitHub issue: https://github.com/netbirdio/netbird/issues/5059

Describe the problem

Updated to management 0.62.0 and dashboard 2.26.0, no IDP config in the UI.

To Reproduce
Take existing install, do a docker compose pull, docker compose down, docker compose up -d --force-recreate. Confirm versions.

Expected behavior

Expect the new feature to be available
Are you using NetBird Cloud?

Self-host
NetBird version

0.62.0
Is any other VPN software installed?
No
If yes, which one?

Debug output

To help us resolve the problem, please attach the following anonymized status output

netbird status -dA

Create and upload a debug bundle, and share the returned file key:

netbird debug for 1m -AS -U

Uploaded files are automatically deleted after 30 days.

Alternatively, create the file only and attach it here manually:

netbird debug for 1m -AS

Screenshots

If applicable, add screenshots to help explain your problem.

Additional context

Add any other context about the problem here.

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @1nerdyguy on GitHub (Jan 7, 2026). Original GitHub issue: https://github.com/netbirdio/netbird/issues/5059 **Describe the problem** Updated to management 0.62.0 and dashboard 2.26.0, no IDP config in the UI. **To Reproduce** Take existing install, do a docker compose pull, docker compose down, docker compose up -d --force-recreate. Confirm versions. **Expected behavior** Expect the new feature to be available **Are you using NetBird Cloud?** Self-host **NetBird version** 0.62.0 **Is any other VPN software installed?** No If yes, which one? **Debug output** To help us resolve the problem, please attach the following anonymized status output netbird status -dA Create and upload a debug bundle, and share the returned file key: netbird debug for 1m -AS -U *Uploaded files are automatically deleted after 30 days.* Alternatively, create the file only and attach it here manually: netbird debug for 1m -AS **Screenshots** If applicable, add screenshots to help explain your problem. **Additional context** Add any other context about the problem here. **Have you tried these troubleshooting steps?** - [x] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions - [x] Searched for similar issues on GitHub (including closed ones) - [x] Restarted the NetBird client - [x] Disabled other VPN software - [x] Checked firewall settings
saavagebueno added the triage-needed label 2026-08-05 01:23:32 -04:00
saavagebueno commented 2026-08-05 01:23:32 -04:00
Author
Owner
Copy Link

@Skyfay commented on GitHub (Jan 8, 2026):

If you want to use this features with an existing Intsance, you need to migrate: https://docs.netbird.io/selfhosted/identity-providers#migration-guide-and-backwards-compatibility

However, the guide for this is not yet available.

<!-- gh-comment-id:3722759018 --> @Skyfay commented on GitHub (Jan 8, 2026): If you want to use this features with an existing Intsance, you need to migrate: https://docs.netbird.io/selfhosted/identity-providers#migration-guide-and-backwards-compatibility However, the guide for this is not yet available.
saavagebueno commented 2026-08-05 01:23:32 -04:00
Author
Owner
Copy Link

@tilwegener commented on GitHub (Jan 8, 2026):

I wanted to get around the problem and set up a fresh instance, but after setup, I can log in, but then I get a constant error message: token invalid.

Image
<!-- gh-comment-id:3722804917 --> @tilwegener commented on GitHub (Jan 8, 2026): I wanted to get around the problem and set up a fresh instance, but after setup, I can log in, but then I get a constant error message: token invalid. <img width="469" height="80" alt="Image" src="https://github.com/user-attachments/assets/88765356-1c20-48e0-8580-e0b369b19d4b" />
saavagebueno commented 2026-08-05 01:23:32 -04:00
Author
Owner
Copy Link

@Skyfay commented on GitHub (Jan 8, 2026):

@tilwegener Are you using Authentik?

<!-- gh-comment-id:3722836441 --> @Skyfay commented on GitHub (Jan 8, 2026): @tilwegener Are you using Authentik?
saavagebueno commented 2026-08-05 01:23:32 -04:00
Author
Owner
Copy Link

@tilwegener commented on GitHub (Jan 8, 2026):

No, I had PocketID before, wanted to use the new feature, and now it runs on the new Embedded Netbird IdP. There, you can integrate all the others and connect several IdPs at the same time, for example

<!-- gh-comment-id:3722856273 --> @tilwegener commented on GitHub (Jan 8, 2026): No, I had PocketID before, wanted to use the new feature, and now it runs on the new Embedded Netbird IdP. There, you can integrate all the others and connect several IdPs at the same time, for example
saavagebueno commented 2026-08-05 01:23:32 -04:00
Author
Owner
Copy Link

@Skyfay commented on GitHub (Jan 8, 2026):

Looks like a missconfiguration from IdP for me.

<!-- gh-comment-id:3722912278 --> @Skyfay commented on GitHub (Jan 8, 2026): Looks like a missconfiguration from IdP for me.
saavagebueno commented 2026-08-05 01:23:32 -04:00
Author
Owner
Copy Link

@tilwegener commented on GitHub (Jan 8, 2026):

According to the documentation, there isn't that much in the new version. There is a dashboard.env and a management.json, which are automatically generated by Getting Started.

dashboard.env

NETBIRD_MGMT_API_ENDPOINT=https://netbird.example.com
NETBIRD_MGMT_GRPC_API_ENDPOINT=https://netbird.example.com
AUTH_AUDIENCE=netbird-dashboard
AUTH_CLIENT_ID=netbird-dashboard
AUTH_CLIENT_SECRET=
AUTH_AUTHORITY=https://netbird.example.com/oauth2
USE_AUTH0=false
AUTH_SUPPORTED_SCOPES=openid profile email offline_access
AUTH_REDIRECT_URI=/nb-auth
AUTH_SILENT_REDIRECT_URI=/nb-silent-auth
NGINX_SSL_PORT=443
LETSENCRYPT_DOMAIN=none

managment.json

    "Stuns": [
        {
            "Proto": "udp",
            "URI": "stun:netbird.example.com:3478"
        }
    ],
    "Relay": {
        "Addresses": ["rels://netbird.example.com:443"],
        "CredentialsTTL": "24h",
        "Secret": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
    },
    "Signal": {
        "Proto": "https",
        "URI": "netbird.example.com:443"
    },
    "Datadir": "/var/lib/netbird",
    "DataStoreEncryptionKey": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
    "EmbeddedIdP": {
        "Enabled": true,
        "Issuer": "https://netbird.example.com/oauth2",
        "DashboardRedirectURIs": [
            "https://netbird.example.com/nb-auth",
            "https://netbird.example.com/nb-silent-auth"
        ]
    }
}
<!-- gh-comment-id:3723861085 --> @tilwegener commented on GitHub (Jan 8, 2026): According to the documentation, there isn't that much in the new version. There is a dashboard.env and a management.json, which are automatically generated by Getting Started. _dashboard.env_ ``` NETBIRD_MGMT_API_ENDPOINT=https://netbird.example.com NETBIRD_MGMT_GRPC_API_ENDPOINT=https://netbird.example.com AUTH_AUDIENCE=netbird-dashboard AUTH_CLIENT_ID=netbird-dashboard AUTH_CLIENT_SECRET= AUTH_AUTHORITY=https://netbird.example.com/oauth2 USE_AUTH0=false AUTH_SUPPORTED_SCOPES=openid profile email offline_access AUTH_REDIRECT_URI=/nb-auth AUTH_SILENT_REDIRECT_URI=/nb-silent-auth NGINX_SSL_PORT=443 LETSENCRYPT_DOMAIN=none ``` _managment.json_ ```{ "Stuns": [ { "Proto": "udp", "URI": "stun:netbird.example.com:3478" } ], "Relay": { "Addresses": ["rels://netbird.example.com:443"], "CredentialsTTL": "24h", "Secret": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX" }, "Signal": { "Proto": "https", "URI": "netbird.example.com:443" }, "Datadir": "/var/lib/netbird", "DataStoreEncryptionKey": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX", "EmbeddedIdP": { "Enabled": true, "Issuer": "https://netbird.example.com/oauth2", "DashboardRedirectURIs": [ "https://netbird.example.com/nb-auth", "https://netbird.example.com/nb-silent-auth" ] } } ```
saavagebueno commented 2026-08-05 01:23:33 -04:00
Author
Owner
Copy Link

@fede843 commented on GitHub (Jan 12, 2026):

I am seeing the "Token invalid" 401 in a previously working setup with Authentik. It got broken after update.

<!-- gh-comment-id:3738149099 --> @fede843 commented on GitHub (Jan 12, 2026): I am seeing the "Token invalid" 401 in a previously working setup with Authentik. It got broken after update.
saavagebueno commented 2026-08-05 01:23:33 -04:00
Author
Owner
Copy Link

@NiklasRosenstein commented on GitHub (Mar 15, 2026):

When do you think the migration documentation would become available? I would like to migrate from Zitadel to Keycloak, and to do this without fully breaking existing users I would have to enable the embedded IdP and add Keycloak but also keep the existing Zitadel IdP in place to ensure existing users can still access their original accounts. Maybe there's even a way to map users from multiple IdPs to the same Netbird user?

<!-- gh-comment-id:4064218056 --> @NiklasRosenstein commented on GitHub (Mar 15, 2026): When do you think the migration documentation would become available? I would like to migrate from Zitadel to Keycloak, and to do this without fully breaking existing users I would have to enable the embedded IdP and add Keycloak but also keep the existing Zitadel IdP in place to ensure existing users can still access their original accounts. Maybe there's even a way to map users from multiple IdPs to the same Netbird user?
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2021 Q4
2021 Q4
2022 Q1
2022 Q1
2022 Q1
2022 Q1
2022 Q1
2022 Q1
accessibility
accessibility
accessibility
acl
acl
acl
agent
agent
agent
agent
agent
agent
Android
Android
Android
Android
Android
Android
api
api
api
authentik
authentik
authentik
automation
automation
automation
azure
azure
azure
battery-usage
battery-usage
battery-usage
bug
cache
cache
cache
client
client
client
client-ui
client-ui
client-ui
cloud
cloud
cloud
cloud-only
cloud-only
cloud-only
cloudflare
cloudflare
cloudflare
community
community
community
compatibility
compatibility
compatibility
config-idp
config-idp
config-idp
config-issue
config-issue
config-issue
connection
connection
connection
contribution
contribution
contribution
coturn
coturn
coturn
cross-vpn
cross-vpn
cross-vpn
dashboard
dashboard
dashboard
data-usage
data-usage
data-usage
distribution
distribution
distribution
dns
dns
dns
docker
docker
docker
documentation
documentation
documentation
duplicate
duplicate
duplicate
enhancement
enhancement
event-stream
event-stream
event-stream
feature-request
feature-request
feature-request
freebsd
freebsd
freebsd
getting-started
getting-started
getting-started
go
go
go
good first issue
good first issue
good first issue
gui
gui
gui
help wanted
help wanted
help wanted
home-assistant
home-assistant
home-assistant
idp
idp
idp
inconsistency
inconsistency
inconsistency
integration
integration
integration
integrations
integrations
integrations
ios
ios
ios
ipv6
ipv6
ipv6
jwt
jwt
jwt
k8s
k8s
k8s
keycloak
keycloak
keycloak
linux
linux
linux
login
login
login
macos
macos
macos
management-service
management-service
management-service
Medium
Medium
Medium
missing-docs
missing-docs
missing-docs
mobile
mobile
mobile
moved-internal
moved-internal
moved-internal
needs-review
needs-review
needs-review
netbird-ui
netbird-ui
netbird-ui
networking
networking
networking
new-platform
new-platform
new-platform
nginx
nginx
nginx
notification
notification
notification
okta
okta
okta
openwrt
openwrt
openwrt
P2
P2
P2
packaging
packaging
packaging
peer-management
peer-management
peer-management
peer-management
peer-management
peer-management
peer-management
peer-management
peer-management
performance
performance
performance
postgres
postgres
postgres
posture-checks
posture-checks
posture-checks
psk
psk
psk
pull-request
Mirrored from GitHub Pull Request
 question
question
question
refactor
refactor
refactor
relay
relay
relay
release
release
release
rfc
rfc
rfc
routes
routes
routes
security
security
security
security-improvement
security-improvement
security-improvement
security-related
security-related
security-related
self-hosting
self-hosting
self-hosting
server
server
server
signal
signal
signal
sleep-issue
sleep-issue
sleep-issue
ssh
ssh
ssh
ssl
ssl
ssl
status
status
status
store
store
store
synology
synology
synology
system-compatibility-issue
system-compatibility-issue
system-compatibility-issue
test-suite
test-suite
test-suite
third-party-integration
third-party-integration
third-party-integration
triage
triage
triage
triage
triage
triage
triage-needed
triage-needed
triage-needed
troubleshooting
troubleshooting
troubleshooting
UX
UX
UX
waiting-feedback
waiting-feedback
waiting-feedback
windows
windows
windows
wontfix
wontfix
wontfix
zitadel
zitadel
zitadel
No Label triage-needed
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
dynr-servers saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: DYNR/netbird#9807
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?