# Authentication **URL:** https://community.grafana.com/c/support/auth/22.md [Latest](https://community.grafana.com/latest.md) · [Categories](https://community.grafana.com/categories.md) · [Tags](https://community.grafana.com/tags.md) --- ## [About the Authentication category](https://community.grafana.com/t/about-the-authentication-category/43)
**Author:** [@usman.ahmad](https://community.grafana.com/u/usman.ahmad)\ **Replies:** 0\ **Last updated:** [March 11, 2017, 3:42pm UTC](https://community.grafana.com/t/about-the-authentication-category/43 "2017-03-11T15:42:02Z")
ask questions about setup and configure authentication, basic auth, LDAP, JWT, SAML, OAuth, OAuth2, Azure AD, etc. Documentation about: Configure authentication Basic auth LDAP Enhanced LDAP JWT SAML … --- ## [Grafana apps in other platforms](https://community.grafana.com/t/grafana-apps-in-other-platforms/164774)
**Author:** [@sophiesun](https://community.grafana.com/u/sophiesun)\ **Replies:** 4\ **Last updated:** [October 22, 2026, 7:10am UTC](https://community.grafana.com/t/grafana-apps-in-other-platforms/164774 "2026-10-22T07:10:21Z")
Hi there, I am developing the grafana app in other platforms and I want the same experience with Slack Grafana app. But one thing confused me, for Grafana api we should use service account token, but if userA in our prod… --- ## [Google Oauth and Nested Groups dosn't work](https://community.grafana.com/t/google-oauth-and-nested-groups-dosnt-work/125094)
**Author:** [@mannybrunnermb](https://community.grafana.com/u/mannybrunnermb)\ **Replies:** 2\ **Last updated:** [September 30, 2026, 7:28am UTC](https://community.grafana.com/t/google-oauth-and-nested-groups-dosnt-work/125094 "2026-09-30T07:28:38Z")
What Grafana version and what operating system are you using? V11.1.0 What are you trying to achieve? Google Oauth Login with nestedgroups role mapping How are you trying to achieve it? user mb@xxxx.com direc… --- ## [Grafana jwt auth issue with jwt token](https://community.grafana.com/t/grafana-jwt-auth-issue-with-jwt-token/163495)
**Author:** [@ashutoshkumar4](https://community.grafana.com/u/ashutoshkumar4)\ **Replies:** 2\ **Last updated:** [July 10, 2026, 9:33am UTC](https://community.grafana.com/t/grafana-jwt-auth-issue-with-jwt-token/163495 "2026-07-10T09:33:50Z")
What Grafana version and what operating system are you using? I am using grafana: 13.0.2 What are you trying to achieve? Implement jwt auth in grafana by passing jwt token in headers How are you trying to achie… --- ## [Pass custom HttpOnly cookie or auth token to Grafana Live SubscribeStream / RunStream backend](https://community.grafana.com/t/pass-custom-httponly-cookie-or-auth-token-to-grafana-live-subscribestream-runstream-backend/163505)
**Author:** [@svzhuravleva](https://community.grafana.com/u/svzhuravleva)\ **Replies:** 1\ **Last updated:** [July 1, 2026, 11:13am UTC](https://community.grafana.com/t/pass-custom-httponly-cookie-or-auth-token-to-grafana-live-subscribestream-runstream-backend/163505 "2026-07-01T11:13:45Z")
We are developing a custom Grafana datasource plugin with backend using grafana-plugin-sdk-go (v0.292.1) that uses Grafana Live Streaming. Our environment is behind an Auth Proxy that injects a corporate authentication … --- ## [LDAP Config UI vs. TOML file, what is used?!](https://community.grafana.com/t/ldap-config-ui-vs-toml-file-what-is-used/163066)
**Author:** [@terr4](https://community.grafana.com/u/terr4)\ **Replies:** 2\ **Last updated:** [June 5, 2026, 12:39pm UTC](https://community.grafana.com/t/ldap-config-ui-vs-toml-file-what-is-used/163066 "2026-06-05T12:39:37Z")
We have Grafana 12.4.2 with LDAP auth active and I noticed a strange bahaviour. The LDAP Config (Group Mapping, Lookups, etc.) are stored in a \*.TOML file in the grafana config folder and referenced to by the “default.i… --- ## [Auth0 requires organization check](https://community.grafana.com/t/auth0-requires-organization-check/162936)
**Author:** [@sltt](https://community.grafana.com/u/sltt)\ **Replies:** 2\ **Last updated:** [May 28, 2026, 6:45am UTC](https://community.grafana.com/t/auth0-requires-organization-check/162936 "2026-05-28T06:45:37Z")
What Grafana version and what operating system are you using? Grafana OSS v13.1.0 What are you trying to achieve? Use Auth0 to authenticate in Grafana How are you trying to achieve it? I have followed Configur… --- ## [Azure AD OAuth: Token refresh fails with AADSTS7000218 when using managed identity](https://community.grafana.com/t/azure-ad-oauth-token-refresh-fails-with-aadsts7000218-when-using-managed-identity/162524)
**Author:** [@pawormstrupmadsen](https://community.grafana.com/u/pawormstrupmadsen)\ **Replies:** 1\ **Last updated:** [April 23, 2026, 1:31pm UTC](https://community.grafana.com/t/azure-ad-oauth-token-refresh-fails-with-aadsts7000218-when-using-managed-identity/162524 "2026-04-23T13:31:27Z")
What Grafana version and what operating system are you using? Grafana main branch (also affects current releases). Running on Azure App Service (Linux, Docker). What are you trying to achieve? Using Azure AD OAuth… --- ## [How to dynamically set Grafana data source HTTP header based on the chosen value from a variable in dashboard?](https://community.grafana.com/t/how-to-dynamically-set-grafana-data-source-http-header-based-on-the-chosen-value-from-a-variable-in-dashboard/77339)
**Author:** [@zulh2022](https://community.grafana.com/u/zulh2022)\ **Replies:** 5\ **Last updated:** [April 20, 2026, 10:47pm UTC](https://community.grafana.com/t/how-to-dynamically-set-grafana-data-source-http-header-based-on-the-chosen-value-from-a-variable-in-dashboard/77339 "2026-04-20T22:47:29Z")
I’m working with Cortex multi-tenancy where both write and read paths require X-Scope-OrgID HTTP header in the request. The write path is working fine. But I can’t figure out how to pass the chosen tenant name in my das… --- ## [Non admin users cannot use AzureAd to login. Error: "Need Admin Approval for Azure AD login"](https://community.grafana.com/t/non-admin-users-cannot-use-azuread-to-login-error-need-admin-approval-for-azure-ad-login/91755)
**Author:** [@kdjomeda](https://community.grafana.com/u/kdjomeda)\ **Replies:** 5\ **Last updated:** [March 3, 2026, 6:45am UTC](https://community.grafana.com/t/non-admin-users-cannot-use-azuread-to-login-error-need-admin-approval-for-azure-ad-login/91755 "2026-03-03T06:45:26Z")
Hi I am using Grafana 10.0.1 OSS installed on an EC2 with public IP. I am using it to track balances from our third parties providers, something like SMS or Email etc. We already using Azure AD and the Grafana Azure A… --- ## [401 error on the alerts sidecar](https://community.grafana.com/t/401-error-on-the-alerts-sidecar/82913)
**Author:** [@portos060474](https://community.grafana.com/u/portos060474)\ **Replies:** 2\ **Last updated:** [February 12, 2026, 2:05am UTC](https://community.grafana.com/t/401-error-on-the-alerts-sidecar/82913 "2026-02-12T02:05:57Z")
Hi, I’m getting 401 authentication error on /api/admin/provisioning/alerting/reload Double checked: the username / password is correct, basic authentication is enabled What Grafana version and what operating system… --- ## [OSS Grafana and AzureAD](https://community.grafana.com/t/oss-grafana-and-azuread/135070)
**Author:** [@mateusamorim96](https://community.grafana.com/u/mateusamorim96)\ **Replies:** 4\ **Last updated:** [February 11, 2026, 9:06am UTC](https://community.grafana.com/t/oss-grafana-and-azuread/135070 "2026-02-11T09:06:12Z")
What Grafana version and what operating system are you using? Grafana v11.2.2 (dbf571744d) What are you trying to achieve? Authenticate using AzureAD How are you trying to achieve it? Setting AzureAD basic SAML Confi… --- ## [Grafana failing to properly parse OAuth Client secrets provided through standard Kubernetes Secret-to-environment variable mapping](https://community.grafana.com/t/grafana-failing-to-properly-parse-oauth-client-secrets-provided-through-standard-kubernetes-secret-to-environment-variable-mapping/161093)
**Author:** [@nataliecita](https://community.grafana.com/u/nataliecita)\ **Replies:** 0\ **Last updated:** [January 16, 2026, 7:37pm UTC](https://community.grafana.com/t/grafana-failing-to-properly-parse-oauth-client-secrets-provided-through-standard-kubernetes-secret-to-environment-variable-mapping/161093 "2026-01-16T19:37:45Z")
What Grafana version and what operating system are you using? Grafana version: 12.0.2 Operating System: Alpine Linux v3.21 (3.21.3) What are you trying to achieve? Trying to authenticate with SSO How are you t… --- ## [Windows 11 API Token](https://community.grafana.com/t/windows-11-api-token/160869)
**Author:** [@dgr75](https://community.grafana.com/u/dgr75)\ **Replies:** 4\ **Last updated:** [January 14, 2026, 8:00am UTC](https://community.grafana.com/t/windows-11-api-token/160869 "2026-01-14T08:00:22Z")
Hello, This is a test under Windows 11. I want to transfer the Grafana backup file from ioBroker (Raspberry Pi, Bookworm) to a new installation (Windows 11). I need a token for restoration in ioBroker Backitup. How ca… --- ## [Github OAuth user organization fetch not working](https://community.grafana.com/t/github-oauth-user-organization-fetch-not-working/126507)
**Author:** [@tomiszili](https://community.grafana.com/u/tomiszili)\ **Replies:** 2\ **Last updated:** [January 12, 2026, 2:22am UTC](https://community.grafana.com/t/github-oauth-user-organization-fetch-not-working/126507 "2026-01-12T02:22:12Z")
What Grafana version and what operating system are you using? Containerized Grafana OSS 11.0.0 in Ubuntu 22.04 and running on ECS Fargate. What are you trying to achieve? Github Oauth integration with github organ… --- ## [LDAP Group Mappings not working with ldap.toml](https://community.grafana.com/t/ldap-group-mappings-not-working-with-ldap-toml/157798)
**Author:** [@nw4](https://community.grafana.com/u/nw4)\ **Replies:** 1\ **Last updated:** [January 9, 2026, 12:48am UTC](https://community.grafana.com/t/ldap-group-mappings-not-working-with-ldap-toml/157798 "2026-01-09T00:48:45Z")
What Grafana version and what operating system are you using? Grafana Open Source 12.1.1 on Windows What are you trying to achieve? Use Group Mappings How are you trying to achieve it? I have my ldap.toml and my … --- ## [Grafana integration with Keycloak Login failed Failed to get token from provider](https://community.grafana.com/t/grafana-integration-with-keycloak-login-failed-failed-to-get-token-from-provider/147603)
**Author:** [@brancomrt](https://community.grafana.com/u/brancomrt)\ **Replies:** 4\ **Last updated:** [January 5, 2026, 10:07am UTC](https://community.grafana.com/t/grafana-integration-with-keycloak-login-failed-failed-to-get-token-from-provider/147603 "2026-01-05T10:07:53Z")
I have problems on Grafana authentication with Keycloak Server. On pod “kube-prometheus-stack-grafana-0” the message error is displayed: logger=context userId=0 orgId=0 uname= t=2025-04-01T16:09:45.10508956Z level=info… --- ## [Grafana Cloud Provider Authentication Error](https://community.grafana.com/t/grafana-cloud-provider-authentication-error/160364)
**Author:** [@vlal](https://community.grafana.com/u/vlal)\ **Replies:** 3\ **Last updated:** [December 18, 2025, 9:08pm UTC](https://community.grafana.com/t/grafana-cloud-provider-authentication-error/160364 "2025-12-18T21:08:55Z")
I’m using terraform to create resources for my Grafana Cloud instance but I’m getting an error that I can’t dig deeper into. I’m trying to configure the AWS Observability Provider by creating a token that has the necess… --- ## [How to Manage Multiple Devices with Per-Device Sharding & Credentials for Loki / InfluxDB?](https://community.grafana.com/t/how-to-manage-multiple-devices-with-per-device-sharding-credentials-for-loki-influxdb/160099)
**Author:** [@alivan](https://community.grafana.com/u/alivan)\ **Replies:** 0\ **Last updated:** [December 11, 2025, 5:26am UTC](https://community.grafana.com/t/how-to-manage-multiple-devices-with-per-device-sharding-credentials-for-loki-influxdb/160099 "2025-12-11T05:26:28Z")
Hi everyone, I’m building a system where multiple devices will be sending logs and metrics to Grafana Cloud. Before I proceed, I want to understand the best practices for handling device-level separation and per-device … --- ## [Discord 0auth2 constantly trying to create an account that is already created](https://community.grafana.com/t/discord-0auth2-constantly-trying-to-create-an-account-that-is-already-created/159953)
**Author:** [@ozdeadmeat](https://community.grafana.com/u/ozdeadmeat)\ **Replies:** 1\ **Last updated:** [December 4, 2025, 11:15pm UTC](https://community.grafana.com/t/discord-0auth2-constantly-trying-to-create-an-account-that-is-already-created/159953 "2025-12-04T23:15:04Z")
\[auth.generic\_oauth\] ;--------------------------------------------- enabled = true name = Discord allow\_sign\_up = true client\_id = client\_secret = scopes = identify guilds email ;empty\_scopes = false auth\_url =… --- ## [Why my LDAP auth is not working](https://community.grafana.com/t/why-my-ldap-auth-is-not-working/159589)
**Author:** [@sergioeristoff](https://community.grafana.com/u/sergioeristoff)\ **Replies:** 0\ **Last updated:** [November 21, 2025, 5:51am UTC](https://community.grafana.com/t/why-my-ldap-auth-is-not-working/159589 "2025-11-21T05:51:44Z")
What Grafana version and what operating system are you using? 12.3 on Docker What are you trying to achieve? Login via Active Directory Account Config: ldap.toml #filters = ldap:debug \\\[\\\[servers\\\]\\\] host… --- ## [Grafana Dashboard Access-Restrictions](https://community.grafana.com/t/grafana-dashboard-access-restrictions/158271)
**Author:** [@fadilck01](https://community.grafana.com/u/fadilck01)\ **Replies:** 1\ **Last updated:** [October 9, 2025, 10:24am UTC](https://community.grafana.com/t/grafana-dashboard-access-restrictions/158271 "2025-10-09T10:24:09Z")
Hi, I am using Grafana OSS version 12.0. We installed Grafana on a Linux VM on-prem and using LDAP for Authentication. We have following roles defined in LDAP. Admin, Editor and Read-only. What I am trying to achieve … --- ## [Admin password reset](https://community.grafana.com/t/admin-password-reset/19455)
**Author:** [@dureiken](https://community.grafana.com/u/dureiken)\ **Replies:** 28\ **Last updated:** [October 6, 2025, 9:02pm UTC](https://community.grafana.com/t/admin-password-reset/19455 "2025-10-06T21:02:49Z")
Hi I lost my admin password, I tried to reset it as shown in FAQ sudo grafana-cli --homepath “/usr/share/grafana/” admin reset-admin-password newpass returns : Incorrect Usage. flag provided but not defined: -homepath … --- ## [Azure SSO Authentication without Client Secret](https://community.grafana.com/t/azure-sso-authentication-without-client-secret/157284)
**Author:** [@vijeshsahadevan1](https://community.grafana.com/u/vijeshsahadevan1)\ **Replies:** 4\ **Last updated:** [September 18, 2025, 4:02pm UTC](https://community.grafana.com/t/azure-sso-authentication-without-client-secret/157284 "2025-09-18T16:02:51Z")
Is it possible to use Entra ID for SSO authentication without using a client secret. Below link explains how to create/enable auth.azuread is grafana config Is it possible to use certificates instead of Client secret… --- ## [Grafana LDAP error - 11.6](https://community.grafana.com/t/grafana-ldap-error-11-6/157119)
**Author:** [@grafana753](https://community.grafana.com/u/grafana753)\ **Replies:** 2\ **Last updated:** [September 9, 2025, 5:45pm UTC](https://community.grafana.com/t/grafana-ldap-error-11-6/157119 "2025-09-09T17:45:34Z")
Hi, I have upgrade to grafana OSS 11.6 and getting below error while doing LDAP auth: I am using port 636 , anyone faced similar issue: not sure i need to upgrade/install plugins mentioned here: Sep 04 17:13:47 zgrafan… --- ## ["Test user mapping" function not working after Grafana update](https://community.grafana.com/t/test-user-mapping-function-not-working-after-grafana-update/147366)
**Author:** [@julien\_mutterer](https://community.grafana.com/u/julien_mutterer)\ **Replies:** 15\ **Last updated:** [September 5, 2025, 6:02pm UTC](https://community.grafana.com/t/test-user-mapping-function-not-working-after-grafana-update/147366 "2025-09-05T18:02:09Z")
Hello, I’m using Grafana Enterprise (unlicensed) self-managed on Windows with a LDAP connector to manage my user’s authentication. Everything worked fine as long as I was in version 11.3.1. I recently updated Grafana f… --- ## [Authentication for Alloy Proxy Setup](https://community.grafana.com/t/authentication-for-alloy-proxy-setup/156526)
**Author:** [@amalstan](https://community.grafana.com/u/amalstan)\ **Replies:** 1\ **Last updated:** [August 22, 2025, 11:47pm UTC](https://community.grafana.com/t/authentication-for-alloy-proxy-setup/156526 "2025-08-22T23:47:50Z")
What Grafana version and what operating system are you using? alloy, version v1.9.2 using Rocky 9.5 What are you trying to achieve? Setting up authentication ( any kind ) between Alloy agent and Alloy proxy How … --- ## [Unable to configure github OAuth](https://community.grafana.com/t/unable-to-configure-github-oauth/156603)
**Author:** [@C.Rogers](https://community.grafana.com/u/C.Rogers)\ **Replies:** 8\ **Last updated:** [August 22, 2025, 3:17pm UTC](https://community.grafana.com/t/unable-to-configure-github-oauth/156603 "2025-08-22T15:17:50Z")
I am pulling from grafana:latest. Everything is proxied, currently locally, behind basic auth. This is to authenticate for static dashboards. I also wanted to implement github auth for admin. So I created my OAuth app, s… --- ## [Unable to login as admin in Grafana](https://community.grafana.com/t/unable-to-login-as-admin-in-grafana/119864)
**Author:** [@dzhang](https://community.grafana.com/u/dzhang)\ **Replies:** 9\ **Last updated:** [August 20, 2025, 4:37am UTC](https://community.grafana.com/t/unable-to-login-as-admin-in-grafana/119864 "2025-08-20T04:37:26Z")
What Grafana version and what operating system are you using? v10.3.4, Linux What are you trying to achieve? We are working on allowing users to access Grafana by port-forwarding from Kubernetes as admin. How are you… --- ## [Azure AD groups Integration](https://community.grafana.com/t/azure-ad-groups-integration/134702)
**Author:** [@daveschof](https://community.grafana.com/u/daveschof)\ **Replies:** 1\ **Last updated:** [August 18, 2025, 9:32am UTC](https://community.grafana.com/t/azure-ad-groups-integration/134702 "2025-08-18T09:32:34Z")
I am using Grafana v11.2.2 (c47b921ef4) on windows server 2019 I have connected the Grafana Instance to Authenticate user with my Azure AD. The users can login those with an assigned role within Azure AD get the correct… [Next page](https://community.grafana.com/c/support/auth/22.md?page=1)