Microsoft Entra ID SCIM Integration Issue

[rushout912]

Steps To Reproduce

1. Launch deployed Bitwarden Lite web app (https://your-bitwarden-domain/#/login).
2. Go to the Admin Console settings. (https://your-bitwarden-domain/#/organizations/*********/settings).
3. Enable SCIM provisioning from submenu. (https://your-bitwarden-domain/#/organizations/**********/settings/scim).
4. Save SCIM URL and SCIM API key credentials for Entra ID SCIM application.
5. Create an Enterprise application from the Microsoft Entra admin center with given URL and API key credentials.
6. Test connection.

Expected Result

Entra ID allows saving the provisioning configuration if and only if test connection is successful, therefore test connection should be successful.

Actual Result

Entra ID throws an Error code CredentialValidationUnavailable with error Message: An error occured while sending the request. When browser's developer console is checked for additional context, network response doesn't tell more detail than Entra ID web page and throws an HTTP 400 error:

"body": {
                "error": {
                    "code": "CredentialValidationUnavailable",
                    "message": "Your application is not reachable. Check the address or tenant identiifer provided. If the problem persists, contact the party who maintains the application.",
                    "details": [],
                    "innerError": {
                        "code": "SystemForCrossDomainIdentityManagementCredentialValidationUnavailable",
                        "details": [],
                        "message": "We received this unexpected response from your application:\r\n\r\nMessage: An error occurred while sending the request.\r\n\r\nPlease check the service and try again.  ",
                        "target": null,
                        "innerError": {
                            "code": "SystemForCrossDomainIdentityManagementCredentialValidationUnavailable",
                            "details": [],
                            "message": "Message:We received this unexpected response from your application:\r\n\r\nMessage: An error occurred while sending the request.\r\n\r\nPlease check the service and try again.  ",
                            "target": null
                        },

Screenshots or Videos

No response

Additional Context

Rotating the SCIM API key doesn't change actual result, Entra ID fails with saving SCIM credentials because test connection fails. Bitwarden cloud server credentials, on the other hand, have no issues. Test connection with Bitwarden cloud server's credentials (https://scim.bitwarden.com/v2/***** or https://scim.bitwarden.eu/v2/****) with appropriate API keys doesn't throw any error. Internal SSL and certificate generation is disabled via environment variable BW_ENABLE_SSL=false since both of these are handled by desired reverse proxy. Lite deployment is run by Docker Compose and all services are in the same Docker network.

Githash Version

f588e30

Environment Details

• Host Operating System: Canonical, Ubuntu, 24.04 LTS, amd64 noble image built on 2024-10-04
• Environment: Docker
• Host Hardware: 2 vCPUs with AMD Rome processor, 8 GB Memory
• Docker Engine Version: 29.3.0, Containerd Version: 2.2.2
• Docker Compose Version: 5.1.0
• Bitwarden Lite Container: Latest container image with dev tag
• Reverse Proxy: Nginx Proxy Manager Docker Image with latest tag

Database Image

MSSQL Docker Image
mcr.microsoft.com/mssql/server:2022-latest

Issue Tracking Info

• I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

[bitwarden-bot]

Thank you for reporting this issue! We've added this to our internal tracking system.
ID: PM-34169
Link (for internal use): https://bitwarden.atlassian.net/browse/PM-34169

[Krychaz]

Hello there,

It sounds like it could be something to do with your reverse proxy setup. We use GitHub issues as a place to track bugs and other development related issues. If your issue persists, please write us back using our “Contact support” form located on our Help Center (https://bitwarden.com/help/).

You can include a link to this issue in the message content.

The issue here will be closed.

Thanks!