@pgnet-deve
Yes, there are several examples, documentation, and success stories available for the setup of an SSO portal in front of proxied apps using FusionAuth and Nginx. Here are some resources that can help you:

The official FusionAuth documentation provides step-by-step tutorials on how to integrate FusionAuth with Nginx. These tutorials cover various use cases, including setting up an Nginx reverse proxy in front of a web application protected by FusionAuth.

The Nginx website also provides documentation on how to configure Nginx as a reverse proxy server for a web application, and how to enable SSO with third-party identity providers like FusionAuth.

There are many community resources available that provide examples and best practices for integrating FusionAuth and Nginx. For example, there are several blog posts and articles that explain how to set up SSO using FusionAuth and Nginx, such as this post on setting up SSO with Nginx and FusionAuth.

Finally, there are several success stories and case studies available that showcase organizations that have successfully implemented FusionAuth and Nginx for their authentication and authorization needs. These case studies can provide insights into how other organizations have integrated these two technologies and the benefits they have gained from doing so.

Overall, there is a wealth of information and resources available that can help you with the setup of an SSO portal in front of proxied apps using FusionAuth and Nginx. With the right documentation and examples, you can easily set up a secure and reliable authentication and authorization solution for your organization.

@simon-roberts

I would use one of the client libraries to manage these. Which one? Would recommend whatever your application is built in, if available. If not, please let us know as we try to support popular languages.

We have folks managing 1000s of tenants using the client libraries, which is not exactly what you are trying to do, but similar.

Hope that helps.

@johnathon like you see on the capture i am using the login screen.

@neskemiquel This was fixed in version 1.41. It was a content-type issue.

@jose-cardenas Hmmm.

Can you tell use anything more?

Are you able to create users with the API?

Have you set up the ingress proxy correctly, making sure you are sending the correct headers. More doc here: https://fusionauth.io/docs/v1/tech/admin-guide/proxy-setup

Did you follow the kubernetes installation guide?

@jesper Sorry to hear about the issues.

Can you try setting the http version, as outlined here:

https://fusionauth.io/community/forum/topic/2254/having-an-issue-with-nginx-in-front-of-fusionauth

@dtokarz1 That's great! Glad you figured it out, and thanks for letting us know.

I have no idea about this.

To add on to what @joshua said, you control the upgrade timing and therefore any resulting outages.

We don't share individual customer uptimes, since that is tied to their usage and the level of resources they have chosen for their individual deployment.

@rpy I think this is the issue you are looking for: https://github.com/FusionAuth/fusionauth-issues/issues/1996

This is slated for release 1.43, which should be out in the next month or so (could be sooner, we're trying to get a few more bugfixes in there).

@lambert-torres replied out of band to this forum. This may have been addressed in version 1.38.0 and beyond.

Thanks,
Josh

Thanks for the information keep sharing such informative post keep suggesting such post.

Hi Josh,

Thanks for taking the time to reply. In the scenario outlined I perhaps didn't mention that the users I was expecting the webhook to fire for already existed in FusionAuth prior to Azure AD sign-in. Should I expect the event to trigger in that instance?

Regards
Stefan

@dhait Hmmm. This issue is due to the OAuth2 specification. If we provided a REST endpoint, it wouldn't be OAuth/OIDC.

If you want to fully customize the look and feel of the login and registration experience, but not use the FusionAuth hosted login pages, the recommended solution is to code directly against our REST APIs:

https://fusionauth.io/docs/v1/tech/apis/login

https://fusionauth.io/docs/v1/tech/apis/registrations

Does this solve your problem?

@julien-sarriot What does turning on the debug log do? https://fusionauth.io/docs/v1/tech/admin-guide/troubleshooting#enabling-debugging has instructions on how to do that and where to look after (in the event log).

Please share that info here.

@benji-levens

Hmmm.

Can you please share the code you are using to try to change the user's password? Letting us follow the exact steps might be helpful.

Additionally, 1.32.1 is a year old. You may want to consider upgrading.

@cyril-feraudet I think this post answers your question:

https://fusionauth.io/community/forum/topic/2253/blocking-domains-from-registration

@zradick

Thanks for the question - if you remove the quotes from your args, that may resolve the issue.

- FUSIONAUTH_APP_ADDITIONAL_JAVA_ARGS=-Djavax.net.ssl.keyStore=/fusionauth/example.p12 -Djavax.net.ssl.keyStorePassword=****

Our documentation may need to be updated to address this

https://fusionauth.io/docs/v1/tech/admin-guide/securing#custom-keystore

Josh

An FYI for anyone reading this in the future. The kafka integration does have been revised and include a docker based example.