Skip to main content
Question

OPENID error auth with entra id AZURE

  • January 22, 2026
  • 5 replies
  • 13 views

Forum|alt.badge.img+4

[2026-01-22T09:15:29+0100] [ERROR] An error occurred during authentication {"custom":{"trace":"Core\\Security\\Authentication\\Domain\\Exception\\SSOAuthenticationException: [openid]: Login claim [email] not found from external provider user in /usr/share/centreon/src/Core/Security/Authentication/Domain/Exception/SSOAuthenticationException.php:122\nStack trace:\n#0 /usr/share/centreon/src/Core/Security/Authentication/Domain/Provider/OpenIdProvider.php(839): Core\\Security\\Authentication\\Domain\\Exception\\SSOAuthenticationException::loginClaimNotFound()\n#1 /usr/share/centreon/src/Core/Security/Authentication/Domain/Provider/OpenIdProvider.php(294): Core\\Security\\Authentication\\Domain\\Provider\\OpenIdProvider->getUsernameFromLoginClaim()\n#2 /usr/share/centreon/src/Core/Security/Authentication/Infrastructure/Provider/OpenId.php(79): Core\\Security\\Authentication\\Domain\\Provider\\OpenIdProvider->authenticateOrFail()\n#3 /usr/share/centreon/src/Core/Security/Authentication/Application/UseCase/Login/Login.php(99): Core\\Security\\Authentication\\Infrastructure\\Provider\\OpenId->authenticateOrFail()\n#4 /usr/share/centreon/src/Core/Security/Authentication/Infrastructure/Api/Login/OpenId/LoginController.php(60): Core\\Security\\Authentication\\Application\\UseCase\\Login\\Login->__invoke()\n#5 /usr/share/centreon/vendor/symfony/http-kernel/HttpKernel.php(183): Core\\Security\\Authentication\\Infrastructure\\Api\\Login\\OpenId\\LoginController->__invoke()\n#6 /usr/share/centreon/vendor/symfony/http-kernel/HttpKernel.php(76): Symfony\\Component\\HttpKernel\\HttpKernel->handleRaw()\n#7 /usr/share/centreon/vendor/symfony/http-kernel/Kernel.php(182): Symfony\\Component\\HttpKernel\\HttpKernel->handle()\n#8 /usr/share/centreon/src/App/Shared/Infrastructure/Legacy/LegacyKernelWrapper.php(55): Symfony\\Component\\HttpKernel\\Kernel->handle()\n#9 /usr/share/centreon/src/App/Shared/Infrastructure/Legacy/ForwardLegacyRoutesListener.php(52): App\\Shared\\Infrastructure\\Legacy\\LegacyKernelWrapper->handle()\n#10 /usr/share/centreon/vendor/symfony/event-dispatcher/EventDispatcher.php(246): App\\Shared\\Infrastructure\\Legacy\\ForwardLegacyRoutesListener->__invoke()\n#11 /usr/share/centreon/vendor/symfony/event-dispatcher/EventDispatcher.php(206): Symfony\\Component\\EventDispatcher\\EventDispatcher::Symfony\\Component\\EventDispatcher\\{closure}()\n#12 /usr/share/centreon/vendor/symfony/event-dispatcher/EventDispatcher.php(56): Symfony\\Component\\EventDispatcher\\EventDispatcher->callListeners()\n#13 /usr/share/centreon/vendor/symfony/http-kernel/HttpKernel.php(159): Symfony\\Component\\EventDispatcher\\EventDispatcher->dispatch()\n#14 /usr/share/centreon/vendor/symfony/http-kernel/HttpKernel.php(76): Symfony\\Component\\HttpKernel\\HttpKernel->handleRaw()\n#15 /usr/share/centreon/vendor/symfony/http-kernel/Kernel.php(182): Symfony\\Component\\HttpKernel\\HttpKernel->handle()\n#16 /usr/share/centreon/vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php(35): Symfony\\Component\\HttpKernel\\Kernel->handle()\n#17 /usr/share/centreon/vendor/autoload_runtime.php(29): Symfony\\Component\\Runtime\\Runner\\Symfony\\HttpKernelRunner->run()\n#18 /usr/share/centreon/api/index.php(24): require_once('...')\n#19 {main}"},"exception":null,"default":{"request_infos":{"uri":"/centreon/authentication/providers/configurations/openid?code=1.AQwAVrIUllSo70i85DO0L218N8CQDhU1JFpMhNUO6w_XaruWAEAMAA.BQABBAIAAAADA","http_method":"GET","server":"10.0.40.110"}

I have find this log  with cat /var/log/centreon/centreon-web.log can you help me ​@Alexandre Belhomme ?

5 replies

Forum|alt.badge.img+11

Based on the log i see this section

Login claim [email] not found from external provider user

 

Are you sure that the provided email is available on the opeid provider that you are trying to connect to ?


Forum|alt.badge.img+4
  • Author
  • Steward **
  • January 22, 2026

@Alexandre Belhomme Yes i’m sure, I tried with another one and I still get the same error.


 


Forum|alt.badge.img+11

Then i don’t think it’s an issue on Centreon side, i would say it’s on your identify provider. Else i don’t know here.


Forum|alt.badge.img+4
  • Author
  • Steward **
  • January 22, 2026

@Alexandre Belhomme 

2026-01-22 10:07:50|-1|0|0|[openid] [INFO] Authentication conditions disabled []
2026-01-22 10:07:50|-1|0|0|[openid] [INFO] Roles mapping is disabled []
2026-01-22 10:07:50|-1|0|0|[openid] [INFO] Groups Mapping disabled []

[2026-01-22T10:07:51+01:00] DEBUG : [Openid] User Information:
{
  "sub": "<ID>",
  "name": "<USER_NAME>",
  "family_name": "<LASTNAME>",
  "given_name": "<FIRSTNAME>",
  "picture": "https://graph.microsoft.com/v1.0/me/photo/$value"
}
| request uri:
"/centreon/authentication/providers/configurations/openid?code=<AUTH_CODE>&state=<STATE>&session_state=<SESSION_STATE>"
| server: "<SERVER_IP>"

[2026-01-22T10:07:51+01:00] ERROR : [Openid] Unable to get login from claim: email
| request uri:
"/centreon/authentication/providers/configurations/openid?code=<AUTH_CODE>&state=<STATE>&session_state=<SESSION_STATE>"
| server: "<SERVER_IP>"

I really want to be able to do this. I have followed all the documentation, but I still get this error. Here is a log file.
 


Forum|alt.badge.img+11

This are specifics to microsoft openid, i don’t use it myself so i can’t help you on this.

Configuring connection via OpenId Connect | Centreon Documentation this is the only documentation i know to configure it all. If there is issues i would look into whitelist configuration on Azure or something related to your company network restrictions, stuff like that, but i’m clueless here