I’m on v2026.1.3
I’m looking to get my instance of PSU pen tested in a couple of weeks, our vendor is a third party, so I’m looking to leverage a local account which I can give them to login.
I have OIDC enabled in my instance, but I used to be able to get to the url https://<domain>/login and still login with a local account, however this hasnt been used a in a long time (could have even been before the last major update), I just attempted to get to https://<domain>/login and it’s showing a ‘not found’ page, even after clearing cookies and ensuring i’m fully logged out.
My authentication.ps1 has both:
Set-PSUAuthenticationMethod -Type "Form" -ScriptBlock {...
and
Set-PSUAuthenticationMethod -Type "OpenIDConnect"...
Has anything changed with the /login url / authentication behavior or am I doing something wrong here?
I just checked on my prod instance of 2026.1.3, and I can get to the /login page.
It shows
Login
and
Login with SAML2
Both work.
I have these configured.
Set-PSUAuthenticationMethod -Type “Form” -ScriptBlock {
Set-PSUAuthenticationMethod -Type “Saml2” -CallbackPath "https://
yeah its odd, I dont get it, scratching my head…
I commented out the line for Set-PSUAuthenticationMethod -Type "OpenIDConnect"
So now all I have is the Form authentication, restarted the service but all I get is:
Starting to wonder if there’s some config somewhere that disables the login screen but I cant find anything, this is in my dev enviroment and I’ve tried it on my server locally too and get the same
The content of my Authentication.ps1 is currently exactly this:
Set-PSUAuthenticationMethod -Type "Form" -ScriptBlock {
param(
[PSCredential]$Credential
)
if ($Credential.UserName -eq 'Admin'){
New-PSUAuthenticationResult -Success -UserName 'Admin'
}else{
New-PSUAuthenticationResult -ErrorMessage 'Bad username or password'
}
}
Per the example in the docs, but still cant get to it.
Cleared my cache - no joy.
Nothing of interest in any of my logs either, cleared them all down, restarted and checked but not getting any errors.
When I goto /login, I briefly see /first-run in the address bar for a split second, it also flashes the page and then goes to Not Found
Branding/Login Page might interfere with loading…?
Or maybe “SecurityModel”: “Permissive”?
Branding is default/out of the box
Security model, I just tried changing to integrated (was on strict) and also tested permissive, neither make a difference.
Okay I think I figured out what’s causing it… there’s a check box for ‘disable first-run wizard’ which I had ticked, I unselected it and that enables the login page once an admin account is configured.
1 Like