Ziomal12

@badsmoke > are you sure? so it has something to do with the offlice_access scope. > > [here is an explanation](https://openid.net/specs/openid-connect-core-1_0.html#OfflineAccess) > > go-oidc also supports the scope > >...

In `docker logs headscale` I see this error: ``` 2024-05-14T16:24:40+02:00 WRN failed to set up OIDC provider, falling back to CLI based authentication error="creating OIDC provider from issuer config: Get...

> i have not extra params > > ``` > oidc: > # only_start_if_oidc_is_available: true > only_start_if_oidc_is_available: true > issuer: "https://auth.example.io/application/o/headscale-test/" > client_id: "123123123123213" > client_secret: "12123123123" > > >...

@julianq What versions are you using? I'm running Authentik [2024.4.2](https://goauthentik.io/docs/releases/2024.4) and headscale [v0.23.0-alpha11](https://github.com/juanfont/headscale/releases/tag/v0.23.0-alpha11)

@julianq Glad to hear that! Unfortunately I'm unable to do that as both services run on different machines. Hopefully there's a fix soon, not a workaround.