From 4cfb22a2c8874d4bc3b1bcc5e848b6860ff70ad1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Piotr=20=C5=81oboda?= <authentik@lobson.pl>
Date: Wed, 25 Feb 2026 17:32:34 +0100
Subject: [PATCH] feat: verbose error on not enabled SSO sign up

---
 lib/models/oidc.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/lib/models/oidc.ts b/lib/models/oidc.ts
index f9b7d68..6230ac4 100644
--- a/lib/models/oidc.ts
+++ b/lib/models/oidc.ts
@@ -181,6 +181,10 @@ export class OidcModel {
     }
 
     if (!user) {
+      // this will allow admin account creation even if SSO signups are disabled following the foregoing logic
+      if (!config.auth.enableSingleSignOnSignUp) {
+        throw new Error('Sign up via SSO is not enabled');
+      }
       throw new Error('There was a problem signing up or logging in!');
     }