Hey friends, I’ve set up OIDC authentication in graylog, and the “Test Server Connection” function works great. However, after logging into Graylog using my Office365 credentials, I get “Login failed. This might be a temporary problem. Please try again.”. Looking at graylog logs, I see this: 2023…

Hey @mruivo This post looks similar to yours [image] Azure AD OIDC Authentication Graylog Central (peer support) Hi, I possibly find the problem. As the documentation on Microsoft email The reported email address for this user JWT, SAML MSA, Azure AD This value is inc…

Yes, in fact it appears to be the exact same problem, but I’m not discerning what the solution was for the fellow. Email shows up in a few areas, including preferred_username as he mentioned. Is there a way to map it so that graylog is happy?

Hey I havent used AzureAD in a long time. To be honest I dont remember mapping anything. I logged in using the user email address. . Is it posible to show your settings for AzureAD? if so make sure you remove any personal info.

Sure, here are all relevant settings I can think of: Portal > Authentication [image] [image] Portal > Token configuration [image] Portal > API Permissions [image] Portal > Expose an API (nothing is set on this page) Portal > Manifest { "id": "[redacted]", "acceptMappedClaims": null, …

I’ve run into the same issue with our AAD - or now called Entra. Also I had still no luck to get this working. Maybe it’s possible to use UPN instead of EMAIL for Graylog?

Hey friends, I’ve still not come to a solution here. Is there anything more I can do? Gsmith, were you able to look at my settings and find something off? I appreciate the help so far.

Hey @mruivo [image] mruivo: Gsmith, were you able to look at my settings and find something off? Im sorry I did not. Ive been busy at work fixing issues.

Hey @gsmith Not a problem, I appreciate any help I can get. It seems email should natually show up in the OIDC spec, but Azure AD isn’t playing nice. Adding email to optional claims should fix this, but no dice. If your setup is working, it would be great to know which claims, optional claims, and …

Hi @mruivo , @oliver.dorn Did either of you resolve this issue? I’m currently trouble-shooting the same problem.

OIDC authentication fails because of missing email claim

Graylog Central (peer support)

gsmith (GSmith) August 2, 2023, 3:41am 2

Hey @mruivo

This post looks similar to yours

Topic		Replies	Views
Azure AD OIDC integration Graylog Central (peer support)	2	1389	April 4, 2022
Azure AD OIDC Authentication Graylog Central (peer support) basic-configuration	2	1788	February 24, 2022
OIDC authentication and claims Graylog Central (peer support)	2	1227	October 26, 2021
Connecting to Graylog using AzureAD Graylog Central (peer support) basic-configuration	3	1531	January 31, 2022
Azure OIDC Configuration not working Graylog Central (peer support)	0	51	May 28, 2025

OIDC authentication fails because of missing email claim

Related topics