Oof, didn't test with OIDC, my bad. Not an OIDC expert, so would be nice if someone else chimes in, but it works as advertised with a simple keycloak server setup. Consider: Tested-by: Gabriel Goller <g.goller at proxmox.com>