Azure AD authentication failing

[skuchipu]

I'm betting below error while setting up Azure AD authentication
Error on login screen
OAuthCreateAccount
Contact support if this error is unexpected.

Error from web pod logs
https://next-auth.js.org/errors#adapter_error_createuser Sign up is disabled. {
message: 'Sign up is disabled.',
stack: 'Error: Sign up is disabled.\n' +

I've used the following env's

- name: AUTH_DISABLE_SIGNUP
  value: "false"
- name: AUTH_AZURE_AD_CLIENT_ID
  value: "XXXXXXXXXXXXXXXXXXXXXXXXXX"
- name: AUTH_AZURE_AD_CLIENT_SECRET
  value: "XXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
- name: AUTH_AZURE_AD_TENANT_ID
  value: "XXXXXXXXXXXXXXXXXXXXXXXXXXX"
- name: AUTH_AZURE_ALLOW_ACCOUNT_LINKING
  value: "true"
- name: AUTH_DISABLE_USERNAME_PASSWORD
  value: "true"
- name: NEXT_PUBLIC_SIGN_UP_DISABLED
  value: "false"

[inkeep-ai-assistant[bot]]

The error message Sign up is disabled during Azure AD authentication is related to the AUTH_DISABLE_SIGNUP environment variable. When set to true, new user sign-up is disabled, and only existing users can log in. In your provided configuration, you have:

• AUTH_DISABLE_SIGNUP: "false"

This should allow sign-ups, so the error is unexpected if this value is truly being read by your deployment.

Check the following:

• Make sure there are no conflicting environment variables or overrides elsewhere in your deployment (such as another AUTH_DISABLE_SIGNUP set to true).
• Double-check for a typo in the variable name or accidental quoting issues.
• Ensure your deployment is actually picking up the updated value (sometimes changes require a full redeploy/restart).
• Confirm that your Azure AD configuration is correct and that the OAuth redirect URL matches what is set up in Azure (should be /api/auth/callback/azure-ad).

Also, note that the variable NEXT_PUBLIC_SIGN_UP_DISABLED is not referenced in the documentation for controlling signup, so it will not affect Langfuse's backend authentication logic(1)(2).

If the problem persists, review your deployment logs for any warnings about environment variable parsing or reach out to Langfuse Support with full logs and your deployment configuration.

📚 Sources:

1. Authentication and SSO (self-hosted)
2. Authentication and SSO (self-hosted) - Langfuse

---

Have another question? Just tag @inkeep.

[jannikmaierhoefer]

Hi @skuchipu, was inkeep bot able to help you with this?

[dorabra]

Hey regarding Azure authentication. I had similar issue. When configured Azure app registration I used the CUSTOM variables in langfuse documentation. For some weird reason the AZURE_ variables are not working well.