Workspace App gets HTTP ERROR 500 after MFA Authentication

Hi there!

I'm new and thats my first post ;)

We are going to use the Workspace app in combination with Devolutions Server. We activated SSO as well as MFA (TOTP or YubiKey).
MFA works fine with Remote Desktop Manager. But with Workspace App (Chrome Plugin) we got an Error 500 after MFA authentication.
Logs on Devolutions Server says we authenticated successfully.
After ~2 Minutes of waiting, we refresh the "Error 500" Page, and thats it: we are successfully logged in!
Every time this happens, i'll get a strange email about it:

The following error
  was received by at 03/06/2024 07:14:42

  Error:

  InvalidOperationException
  - The specified principal was rejected because the mandatory subject claim
  was missing. at
  OpenIddict.Server.OpenIddictServerHandlers.ValidateSignInDemand.HandleAsync(ProcessSignInContext
  context) at
  OpenIddict.Server.OpenIddictServerDispatcher.DispatchAsync[TContext](TContext
  context) at
  OpenIddict.Server.OpenIddictServerDispatcher.DispatchAsync[TContext](TContext
  context) at OpenIddict.Server.AspNetCore.OpenIddictServerAspNetCoreHandler.SignInAsync(ClaimsPrincipal
  user, AuthenticationProperties properties) at
  Microsoft.AspNetCore.Authentication.AuthenticationService.SignInAsync(HttpContext
  context, String scheme, ClaimsPrincipal principal, AuthenticationProperties
  properties) at
  Devolutions.Server.OAuth.Handler.VerifyRequestHandler.HandleAsync(HandleVerificationRequestContext
  context) at
  OpenIddict.Server.OpenIddictServerDispatcher.DispatchAsync[TContext](TContext
  context) at OpenIddict.Server.OpenIddictServerDispatcher.DispatchAsync[TContext](TContext
  context) at
  OpenIddict.Server.OpenIddictServerHandlers.Device.HandleVerificationRequest.HandleAsync(ProcessRequestContext
  context) at
  OpenIddict.Server.OpenIddictServerDispatcher.DispatchAsync[TContext](TContext
  context) at
  OpenIddict.Server.OpenIddictServerDispatcher.DispatchAsync[TContext](TContext
  context) at
  OpenIddict.Server.AspNetCore.OpenIddictServerAspNetCoreHandler.HandleRequestAsync()
  at Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext
  context) at
  Devolutions.Server.Middleware.LegacyTokenParserMiddleware.InvokeAsync(HttpContext
  httpContext) at
  Devolutions.Server.OAuth.Middleware.OAuthTokenParserMiddleware.InvokeAsync(HttpContext
  httpContext) at Microsoft.AspNetCore.ResponseCompression.ResponseCompressionMiddleware.InvokeCore(HttpContext
  context) at
  Devolutions.Server.Middleware.ReferrerPolicyMiddleware.InvokeAsync(HttpContext
  httpContext) at
  Devolutions.Server.Middleware.StrictTransportMiddleware.InvokeAsync(HttpContext
  httpContext) at
  Devolutions.Server.Middleware.XContentTypeOptionsMiddleware.InvokeAsync(HttpContext
  httpContext) at
  Devolutions.Server.Middleware.XFrameOptionsMiddleware.InvokeAsync(HttpContext
  httpContext) at Devolutions.Server.Middleware.CSPMiddleware.InvokeAsync(HttpContext
  httpContext) at
  Serilog.AspNetCore.RequestLoggingMiddleware.Invoke(HttpContext httpContext)
  at
  Microsoft.AspNetCore.Diagnostics.ExceptionHandlerMiddleware.<Invoke>g__Awaited|6_0(ExceptionHandlerMiddleware
  middleware, HttpContext context, Task task) --- Default

  Source:

  OpenIddict.Server 

Also, I'm a bit confused about the token lifetime. I've set it to 12 hours. But it seems to be a more random value - not infrequently i can login without MFA the next day!

I hope you can help me with the issues and I am already very grateful!

Best regards

Markus