IdentityServer4 behind Nginx Ingress: External login via Azure AD is not working with Edge and Mobile browsers

9/10/2019

I am using Azure Kubernetes Service and there I have Nginx-Ingress controller.

One of my services is the quick start version of IdentitySever4 with minimal changes, and there I registered Azure AD as external provider.

Unfortunately the Azure AD is not working with the Edge browser in desktop and none of mobile browsers in IOS.

It sticks in the forwarded request on the location: "External/Callback".

Here is Ingress annotations

  annotations:
    kubernetes.io/ingress.class: "nginx"
    certmanager.k8s.io/cluster-issuer: "letsencrypt-prod"
    nginx.ingress.kubernetes.io/server-snippet: |
      client_body_buffer_size     128k;  
      client_max_body_size 24M;
      client_header_buffer_size 5120k;
      large_client_header_buffers 16 5120k;
    nginx.ingress.kubernetes.io/proxy-buffer-size: "128k"  
    nginx.ingress.kubernetes.io/use-port-in-redirects: "true" 
    nginx.ingress.kubernetes.io/configuration-snippet: |
      add_header Referrer-Policy origin;    
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Real-IP $remote_addr;         
      proxy_set_header Upgrade $http_upgrade; 
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_set_header Connection keep-alive; 
-- hasuz61
azure-active-directory
azure-kubernetes
identityserver4
kubernetes
nginx-ingress

0 Answers