Troubleshooting

Admin shows “Session required”

• Log in at /user/login with an admin user.
• Use HTTPS when SESSION_COOKIE_SECURE=true.
• Confirm proxy sends X-SSL-Client-Serial and X-SSL-Client-FP.

SAML fails to validate

• Ensure SP cert is configured in /admin/saml/.
• Re-import IdP metadata after changing signing keys.

mTLS missing on APIs

• Check API_MTLS_REQUIRED_PATHS and proxy header pass-through.