# Temporal web openid authentication fails

**URL:** <https://community.temporal.io/t/temporal-web-openid-authentication-fails/2266>\
**Category:** Community Support\
**Tags:** web-ui\
**Created:** [May 28, 2021, 4:51am UTC](https://community.temporal.io/t/temporal-web-openid-authentication-fails/2266 "2021-05-28T04:51:09Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Pruthvi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.temporal.io/pruthvi/32/709_2.png) [@Pruthvi](https://community.temporal.io/u/Pruthvi)\
**Post date:** [May 28, 2021, 4:51am UTC](https://community.temporal.io/t/temporal-web-openid-authentication-fails/2266/1 "2021-05-28T04:51:09Z")

</div>

I’m exposing temporal web via kubernetes ingress with temporalio/web:1.9.1.  
I have set up the config under server/config.yml  
while trying to access the web app I see opened error below. Could some one help me debug

{“message”:"\n OPError: expected 200 OK, got: 404 Not Found\n at processResponse (/usr/app/node\_modules/openid-client/lib/helpers/process\_response.js:48:11)\n at /usr/app/node\_modules/openid-client/lib/issuer.js:262:20\n at async /usr/app/node\_modules/p-some/index.js:53:19\n OPError: invalid\_client (Bad credentials)\n at processResponse (/usr/app/node\_modules/openid-client/lib/helpers/process\_response.js:45:13)\n at /usr/app/node\_modules/openid-client/lib/issuer.js:262:20\n at async /usr/app/node\_modules/p-some/index.js:53:19"}

---

<div class="post-metadata">

**Author:** ![Ruslan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.temporal.io/ruslan/32/66_2.png) [@Ruslan](https://community.temporal.io/u/Ruslan)\
**Post date:** [May 29, 2021, 12:10am UTC](https://community.temporal.io/t/temporal-web-openid-authentication-fails/2266/2 "2021-05-29T00:10:31Z")

</div>

Seems it doesn’t reach the oidc configuration

Are you able to reach the oidc configuration manually by opening it in your browser? To do that, add `.well-known/openid-configuration` to the address of your `issuer` parameter and open the link in your browser.

For example, here is google’s oidc config:  
[https://accounts.google.com/.well-known/openid-configuration](https://accounts.google.com/.well-known/openid-configuration)

For okta this would be:

```auto
https://dev-xxxxxxx.okta.com/.well-known/openid-configuration

```

---

<div class="post-metadata">

**Author:** ![Pruthvi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.temporal.io/pruthvi/32/709_2.png) [@Pruthvi](https://community.temporal.io/u/Pruthvi)\
**Post date:** [May 29, 2021, 12:51am UTC](https://community.temporal.io/t/temporal-web-openid-authentication-fails/2266/3 "2021-05-29T00:51:58Z")

</div>

thanks, I had to change my issuer\_url for the fix

---

<div class="post-metadata">

**Author:** ![Ruslan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.temporal.io/ruslan/32/66_2.png) [@Ruslan](https://community.temporal.io/u/Ruslan)\
**Post date:** [May 29, 2021, 4:26am UTC](https://community.temporal.io/t/temporal-web-openid-authentication-fails/2266/4 "2021-05-29T04:26:12Z")

</div>