OIDC authentication against Auth0 not working | Community
Skip to main content

OIDC authentication against Auth0 not working

  • March 14, 2024
  • 3 replies
  • 0 views
J

Hi, tried to get the OIDC EAP to work with our Auth0 account. Unfortunately I end up hitting the same error over and over again: 

Couldn't log you in
Contact your administrator for help or try again

Tried to use the developer tools to understand what is wrong but unfortunately the network traffic does not give out any extra information.

I tested the configuration with several different possibilities:

  • Both Authentication modes: PKCE and Authorization code flow.
  • Tested with both "Turn on auto discovery" on and off (manually setting the userinfo, JWK, authorization and token endpoints). 
  • With different scopes (openid and some more scopes added).
  • With new client and with an existing client (that works on a separate project with the same settings).

The end result is always the same.

We have been waiting for the OIDC support for some quite time as we have some critical needs that require this. Hoping to get some assistance on how to solve the situation.

    3 replies

    Caroline13

    Thanks for reaching out, Jukka. I replied to you via email but I'll answer here as well for posterity and transparency; are you trying to sign in users that don't have an email? Zendesk expects and requires an email so the email scope has to be included. 

    J
    • Jukka11
    • Author
    • March 20, 2024

    Hi Caroline! Thanks for the fast response. Yes, the users had an email but we were missing the email scope. Thanks for the help!

    As a side note, there are two failing requests (because of CORS errors) that we can see on the browser developer tools inside network tab: 

    Note that even though we get these failing requests, everything works fine feature-wise. This kind of failing request may throw people off the scent (at least it did us) when trying to figure out what is wrong with the integration. 

    Caroline13

    Thanks for following up and happy you got it working - I think we'll need to consider how we best communicate the required scopes that need to be included in the configuration, so that we do a better job of getting you set up correctly from the start. And thanks for sharing that red herring! 

    Terms & ConditionsCookie settingsAccessibility statement