Request Unauhtorized

I have used default authorizer and claim_mappers for authorization using azure AD. Once I do a sso login, I’m getting request unauthorized on web-ui. I don’t see any errors in the server or web logs.


When I check the network tab, I can see once after login the redirect_url is set to api/v1/namespace.

When I try to access the default/workspace api from postman, I’m getting 200status. I have assigned default:write claims to myself.

Please let me know what I’m missing here.

I’m running into the same thing. I’ve got workers able to authorize, but I’ve locked myself out of the UI now. Were you able to fix this somehow?

I tracked down my issue. I was missing scopes for “temporal-system:*” (admin/read/write). After assigning those, this works properly for me!