I’m on v2026.1.3
I’m looking to get my instance of PSU pen tested in a couple of weeks, our vendor is a third party, so I’m looking to leverage a local account which I can give them to login.
I have OIDC enabled in my instance, but I used to be able to get to the url https://<domain>/login and still login with a local account, however this hasnt been used a in a long time (could have even been before the last major update), I just attempted to get to https://<domain>/login and it’s showing a ‘not found’ page, even after clearing cookies and ensuring i’m fully logged out.
My authentication.ps1 has both:Set-PSUAuthenticationMethod -Type "Form" -ScriptBlock {...
andSet-PSUAuthenticationMethod -Type "OpenIDConnect"...
Has anything changed with the /login url / authentication behavior or am I doing something wrong here?
I just checked on my prod instance of 2026.1.3, and I can get to the /login page.
It shows
Login
and
Login with SAML2
Both work.
I have these configured.
Set-PSUAuthenticationMethod -Type “Form” -ScriptBlock {
Set-PSUAuthenticationMethod -Type “Saml2” -CallbackPath "https://
yeah its odd, I dont get it, scratching my head…
I commented out the line for Set-PSUAuthenticationMethod -Type "OpenIDConnect"
So now all I have is the Form authentication, restarted the service but all I get is:
Starting to wonder if there’s some config somewhere that disables the login screen but I cant find anything, this is in my dev enviroment and I’ve tried it on my server locally too and get the sameThe content of my Authentication.ps1 is currently exactly this:
Set-PSUAuthenticationMethod -Type "Form" -ScriptBlock {
param(
[PSCredential]$Credential
)
if ($Credential.UserName -eq 'Admin'){
New-PSUAuthenticationResult -Success -UserName 'Admin'
}else{
New-PSUAuthenticationResult -ErrorMessage 'Bad username or password'
}
}
Per the example in the docs, but still cant get to it.
Cleared my cache - no joy.
Nothing of interest in any of my logs either, cleared them all down, restarted and checked but not getting any errors.
When I goto /login, I briefly see /first-run in the address bar for a split second, it also flashes the page and then goes to Not Found
a84227774ece1dc4a9c625603d44505fa3475c9f.png
Branding/Login Page might interfere with loading…?
Or maybe “SecurityModel”: “Permissive”?
Branding is default/out of the box
Security model, I just tried changing to integrated (was on strict) and also tested permissive, neither make a difference.
Okay I think I figured out what’s causing it… there’s a check box for ‘disable first-run wizard’ which I had ticked, I unselected it and that enables the login page once an admin account is configured.