Windows Client Error: rpc error: code = PermissionDenied desc = invalid user

[samf-acacia]

Describe the problem

A subset of Windows 11 users in our environment are having trouble connecting to our self-hosted Netbird instance. We also run Ubuntu Desktop clients, but this issue doesn't affect those devices. We run Microsoft Entra-ID for SAML/SSO authentication to connect.

When a user (who is having the issue) attempts to connect to the Netbird from Windows, they are forwarded to the Entra login page and manage to successfully authenticate, and are presented with the "Login Successful" page from Netbird. After about 15-20 seconds Netbird time out and they get the error:

rpc error: code = PermissionDenied desc = invalid user

Tried to search past issues, but couldn't find anything related to this specific issue.

The user does show up in the Management portal (successful login??) of our instance, tried removing and reconnecting, but that didn't work.

To Reproduce

Steps to reproduce the behavior:

1. Go to Netbird VPN client and attempt to connect
2. Log in using Entra ID credentials
3. Wait 15-20 seconds for the client to time out
4. See error rpc error: code = PermissionDenied desc = invalid user

Expected behavior

A successful connection to our Netbird instance since it shows Login Successful.

Are you using NetBird Cloud?

Self hosting Netbird

NetBird version

v0.35.2 on Server and Clients

Do you face any (non-mobile) client issues?

This is specifically a Windows 11 client issue

Screenshots