SSO over Proxy (OIDC Discovery Endpoint)

Questions
1

Hi everyone,
we’re running an n8n instance (version 1.12.2) and we’ve noticed an issue where the OIDC/OpenID Connect discovery endpoint does not use our configured proxy.

For other outgoing requests (e.g. webhooks) n8n automatically uses the proxy that is set via environment variables, and using curl from the terminal also works through the proxy.
However, the discovery endpoint configuration seems to ignore the proxy.

Has anyone seen the same problem?

  • Is there a way to explicitly configure a proxy for the discovery endpoint / OIDC requests?

  • Or any workaround to force n8n to route this request through the proxy?

Thanks a lot!

2

This issue occurs because the OIDC discovery endpoint requests use Node.js’s `http`/`https` modules, which don’t automatically inherit proxy settings from environment variables. To fix this, you’ll need to explicitly configure the proxy for these requests in your n8n configuration.

Try setting the `NODE_EXTRA_CA_CERTS` environment variable with your proxy’s CA certificate and ensure `HTTP_PROXY`/`HTTPS_PROXY` are correctly configured. If this doesn’t work, you might want to check the n8n documentation on SSO configuration or ask in the n8n Discord for more specific guidance.