Describe the problem
I tried to enable SSO for a service , but when opening the service i get a “authentication service unavailable” error, the proxy logs show:
`2026-06-26T22:21:52.592Z WARN [scheme: oidc] proxy/internal/auth/middleware.go:531: authentication infrastructure error: get OIDC URL: rpc error: code = Canceled desc = context canceled
2026-06-26T22:21:52.592Z DEBG proxy/internal/accesslog/middleware.go:87: response: request_id=method=GET host=service..*** path=/ status=502 duration=2982ms source=172.30.0.1 origin=auth service=*** account=***
2026-06-26T22:21:54.663Z WARN [scheme: oidc] proxy/internal/auth/middleware.go:531: authentication infrastructure error: get OIDC URL: rpc error: code = Canceled desc = context canceled
2026-06-26T22:21:54.663Z DEBG proxy/internal/accesslog/middleware.go:87: response: request_id=d8vfmv0mmqtc73d3urbg method=GET host=service.. path=/icon.svg status=502 duration=6344ms source=...origin=auth service= account=
2026-06-26T22:22:03.873Z WARN [scheme: oidc] proxy/internal/auth/middleware.go:531: authentication infrastructure error: get OIDC URL: rpc error: code = FailedPrecondition desc = create OIDC provider: Get "https://netbird.***.***/oauth2/.well-known/openid-configuration": dial tcp ...:443: i/o timeout
2026-06-26T22:22:03.873Z DEBG proxy/internal/accesslog/middleware.go:87: response: request_id=**** method=GET host=service.. path=/favicon.ico status=502 duration=30002ms source=... origin=auth service=*** account=***
2026-06-26T22:22:19.560Z WARN [scheme: oidc] proxy/internal/auth/middleware.go:531: authentication infrastructure error: get OIDC URL: rpc error: code = FailedPrecondition desc = create OIDC provider: Get "https://netbird.***.***/oauth2/.well-known/openid-configuration": dial tcp ...:443: i/o timeout
2026-06-26T22:22:19.560Z DEBG proxy/internal/accesslog/middleware.go:87: response: request_id=*** method=GET host=service.. path=/ status=502 duration=30002ms source=... origin=auth service=*** account=***`
When I try to create a Identity provider for example Authentik and click on i get the following error:
Error: Identity provider issuer is unreachable: get "https://authentic..***:***/.well-known/openid-configuration": context deadline exceeded (client.timeout exceeded while awaiting headers)
To Reproduce
Steps to reproduce the behavior:
- Go to Reverse Proxy / Services
- Edit HTTPS Service
- Go To authentication
- Add SSO
- Save
- Open the edited service
Expected behavior
A SSO Page
Are you using NetBird Cloud?
No
NetBird version: v0.74.1
Is any other VPN software installed?
no
Debug output
To help us resolve the problem, please attach the following anonymized status output
netbird status -dA
Peers detail:
desktop-8rstaj2.anon-jthL0.domain:
NetBird IP: 100.119.22.246
NetBird IPv6: 2001:db8:ffff::2
Public key: p4QgtNOd8EuArmGcKL/Rg/O5zQLGrGR55TEI6LpM8HM=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): host/prflx
ICE candidate endpoints (Local/Remote): 2001:db8:ffff:::51820/2001:db8:ffff::1:51820
Relay server address: rels://netbird.anon-kAnLy.domain:443
Last connection update: 4 minutes, 7 seconds ago
Last WireGuard handshake: 2 minutes, 2 seconds ago
Transfer status (received/sent) 32.2 KiB/72.7 KiB
Quantum resistance: false
Networks: -
Latency: 2.975639ms
proxy-d93cg9r8tp1c73cntseg-51-244.anon-jthL0.domain:
NetBird IP: 100.119.51.244
NetBird IPv6: 2001:db8:ffff::3
Public key: HIqPaDHOKANSO33CI6mDgbNXUJATXE92vKtuczalpls=
Status: Connected
-- detail --
Connection type: Relayed
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address: rels://netbird.anon-kAnLy.domain:443
Last connection update: 1 hour, 29 minutes ago
Last WireGuard handshake: 15 seconds ago
Transfer status (received/sent) 58.3 KiB/382.7 KiB
Quantum resistance: false
Networks: -
Latency: 0s
-authentic-docker.anon-jthL0.domain:
NetBird IP: 100.119.62.229
NetBird IPv6: 2001:db8:ffff::4
Public key: GqIBqJ8oQy7B4I3OsHc3fCUt+wYwud/3eVuBmEC7+FQ=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): host/prflx
ICE candidate endpoints (Local/Remote): 192.168.251.94:51820/198.51.100.0:51820
Relay server address: rels://netbird.anon-kAnLy.domain:443
Last connection update: 4 days ago
Last WireGuard handshake: 1 minute, 48 seconds ago
Transfer status (received/sent) 683.3 KiB/944.9 KiB
Quantum resistance: false
Networks: -
Latency: 314.763µs
debian-trixie-latest-amd64-base.anon-jthL0.domain:
NetBird IP: 100.119.189.0
NetBird IPv6: 2001:db8:ffff::5
Public key: hf7dMSQJhX7fIbNsIZflV6858e9U9q+cvPHOhIxE+k4=
Status: Connected
-- detail --
Connection type: Relayed
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address: rels://netbird.anon-kAnLy.domain:443
Last connection update: 1 hour, 29 minutes ago
Last WireGuard handshake: 17 seconds ago
Transfer status (received/sent) 4.4 KiB/14.1 KiB
Quantum resistance: false
Networks: -
Latency: 11.625234ms
Events:
[INFO] SYSTEM (214aefc9-cf66-4848-9309-ddd05656cfcf)
Message: Network map updated
Time: 1 day, 20 hours ago
[INFO] SYSTEM (bdee23ec-0bbe-4638-9529-bf8fac4b12df)
Message: Network map updated
Time: 1 day, 20 hours ago
[INFO] SYSTEM (b7515f88-1d48-4198-bbc3-ed7e2154a797)
Message: Network map updated
Time: 1 day, 1 hour ago
[INFO] SYSTEM (cb66ea90-ee62-41ac-8b4d-a0e084718005)
Message: Network map updated
Time: 15 hours, 23 minutes ago
[INFO] SYSTEM (9db0fcec-d959-4cb4-bcf6-6795bbe7dcc5)
Message: Network map updated
Time: 15 hours, 22 minutes ago
[INFO] SYSTEM (8605078a-7f2a-4eee-bb5b-66828166db3e)
Message: Network map updated
Time: 15 hours, 21 minutes ago
[INFO] SYSTEM (b068be10-11cb-462f-8898-22a8039fa4be)
Message: Network map updated
Time: 15 hours, 12 minutes ago
[INFO] SYSTEM (ca57f608-f68e-4ec5-9228-6dae8fed9a68)
Message: Network map updated
Time: 1 hour, 29 minutes ago
[INFO] SYSTEM (46753107-5fdf-4a56-8eea-4dfb2a578710)
Message: Network map updated
Time: 1 hour, 29 minutes ago
[INFO] SYSTEM (30425a62-3957-4fb5-9f50-6cebe683500c)
Message: Network map updated
Time: 1 hour, 19 minutes ago
OS: linux/amd64
Daemon version: 0.73.2
CLI version: 0.73.2
Profile: default
Management: Connected to https://netbird.anon-kAnLy.domain:443
Signal: Connected to https://netbird.anon-kAnLy.domain:443
Relays:
[stun:netbird.anon-kAnLy.domain:3478] is Available
[rels://netbird.anon-kAnLy.domain:443] is Available via ws
Nameservers:
[9.9.9.9:53, 149.112.112.112:53] for [anon-shRZf.domain] is Available
FQDN: stopdocker.anon-jthL0.domain
NetBird IP: 100.119.247.210/16
NetBird IPv6: 2001:db8:ffff::6/64
Interface type: Kernel
Wireguard port: 51820
Quantum resistance: false
Lazy connection: true
SSH Server: Disabled
Networks: -
Peers count: 4/4 Connected
Create and upload a debug bundle, and share the returned file key:
netbird debug for 1m -AS -U
b00aa6a4e303646a93fc08172871e8413b8cd5b3ef913a514c395c1b694cafa0/04dc4dc2-727d-444a-8dff-cb0cd59b0a98
Uploaded files are automatically deleted after 30 days.
Screenshots
If applicable, add screenshots to help explain your problem.
Additional context
Add any other context about the problem here.
Have you tried these troubleshooting steps?
- Reviewed client troubleshooting (if applicable)
- Checked for newer NetBird versions
- Searched for similar issues on GitHub (including closed ones)
- Restarted the NetBird client
- Disabled other VPN software
- Checked firewall settings