# \#authentication

**URL:** https://community.palantir.com/tag/authentication/71.md

[Latest](https://community.palantir.com/latest.md) · [Categories](https://community.palantir.com/categories.md) · [Tags](https://community.palantir.com/tags.md)

---

## [New user unable to login with passkey](https://community.palantir.com/t/new-user-unable-to-login-with-passkey/7240)

<div class="topic-metadata">

**Author:** [@spencerv99](https://community.palantir.com/u/spencerv99)\
**Replies:** 1\
**Last updated:** [September 18, 2026, 12:05pm UTC](https://community.palantir.com/t/new-user-unable-to-login-with-passkey/7240 "2026-09-18T12:05:19Z")

</div>

A user in my organization is unable to login after completing account setup from my invitation link. He gets an error stating that his passkey is incorrect. We have tried resetting their computer’s passkey, resetting the…

---

## [Login error on a new account?](https://community.palantir.com/t/login-error-on-a-new-account/920)

<div class="topic-metadata">

**Author:** [@551b1efa5071c1b61d4c](https://community.palantir.com/u/551b1efa5071c1b61d4c)\
**Replies:** 2\
**Last updated:** [August 7, 2024, 7:57am UTC](https://community.palantir.com/t/login-error-on-a-new-account/920 "2024-08-07T07:57:34Z")

</div>

Anyone else get the error: Login Error Login failed as a suitable authentication provider could not be located. Please contact your administrator for further assistance.

---

## [Microsoft PowerApps OAuth 2.0 Code Grant Flow Issues](https://community.palantir.com/t/microsoft-powerapps-oauth-2-0-code-grant-flow-issues/837)

<div class="topic-metadata">

**Author:** [@BenHodde-Selkirk](https://community.palantir.com/u/BenHodde-Selkirk)\
**Replies:** 3\
**Last updated:** [June 25, 2025, 8:42am UTC](https://community.palantir.com/t/microsoft-powerapps-oauth-2-0-code-grant-flow-issues/837 "2025-06-25T08:42:09Z")

</div>

We were able to set up a custom connector on the Microsoft Power Platform that utilizes the OAuth 2.0 flow to authenticate with Foundry as a third party app. It works great for connecting to Foundry Ontology object types…

---

## [User-delegated authentication from a Custom Widget to an external system](https://community.palantir.com/t/user-delegated-authentication-from-a-custom-widget-to-an-external-system/6983)

<div class="topic-metadata">

**Author:** [@JohnR73](https://community.palantir.com/u/JohnR73)\
**Replies:** 1\
**Last updated:** [July 22, 2026, 7:18pm UTC](https://community.palantir.com/t/user-delegated-authentication-from-a-custom-widget-to-an-external-system/6983 "2026-07-22T19:18:52Z")

</div>

Hi, I’m investigating how to preserve individual user identity when a Foundry Custom Widget triggers operations in an external system. Users authenticate to Foundry through enterprise SSO. The external system has its o…

---

## [Developer Console - How to change associated frontdoor domain in the website hosting request](https://community.palantir.com/t/developer-console-how-to-change-associated-frontdoor-domain-in-the-website-hosting-request/6745)

<div class="topic-metadata">

**Author:** [@ssitur](https://community.palantir.com/u/ssitur)\
**Replies:** 2\
**Last updated:** [June 9, 2026, 6:36pm UTC](https://community.palantir.com/t/developer-console-how-to-change-associated-frontdoor-domain-in-the-website-hosting-request/6745 "2026-06-09T18:36:57Z")

</div>

When requesting a custom domain for a developer console application, we can see the frontdoor domain in the approval request after entering the custom domain to be requested, but it’s not obvious to me where the frontdoo…

---

## [secret key management in AIP authentication](https://community.palantir.com/t/secret-key-management-in-aip-authentication/6502)

<div class="topic-metadata">

**Author:** [@psvz](https://community.palantir.com/u/psvz)\
**Replies:** 0\
**Last updated:** [April 27, 2026, 2:03pm UTC](https://community.palantir.com/t/secret-key-management-in-aip-authentication/6502 "2026-04-27T14:03:18Z")

</div>

Although I totally support limiting authentication options to asymmetric cryptography, it looks like I cannot extract my secret (private) key (identity). Windows security offers a choice of storing the key onto local ma…

---

## [secret key management in authentication](https://community.palantir.com/t/secret-key-management-in-authentication/6476)

<div class="topic-metadata">

**Author:** [@psvz](https://community.palantir.com/u/psvz)\
**Replies:** 0\
**Last updated:** [April 23, 2026, 4:33pm UTC](https://community.palantir.com/t/secret-key-management-in-authentication/6476 "2026-04-23T16:33:59Z")

</div>

Although I totally support limiting authentication options to asymmetric cryptography, it looks like I cannot extract my secret (private) key (identity). Windows security offers a choice of storing the key onto local ma…

---

## [Passkey only works on Windows PIN, cant set up USB or mobile](https://community.palantir.com/t/passkey-only-works-on-windows-pin-cant-set-up-usb-or-mobile/401)

<div class="topic-metadata">

**Author:** [@crackyflipside](https://community.palantir.com/u/crackyflipside)\
**Replies:** 1\
**Last updated:** [June 13, 2024, 8:01pm UTC](https://community.palantir.com/t/passkey-only-works-on-windows-pin-cant-set-up-usb-or-mobile/401 "2024-06-13T20:01:21Z")

</div>

Trying to get a passkey on my mobile phone so I can log in from other machines. My original passkey only works logging in from my office desktop (Windows 11) and typing in my windows PIN on that desktop. When I log in F…

---

## [Foundry OAuth: Logout issue](https://community.palantir.com/t/foundry-oauth-logout-issue/1276)

<div class="topic-metadata">

**Author:** [@alaa-patient1st](https://community.palantir.com/u/alaa-patient1st)\
**Replies:** 1\
**Last updated:** [May 22, 2025, 12:28pm UTC](https://community.palantir.com/t/foundry-oauth-logout-issue/1276 "2025-05-22T12:28:41Z")

</div>

Hi there ! We’re using foundry as a backend for some client apps. When trying to implement a logout, I’ve found the following endpoint: /multipass/api/logout Unfortunately, this endpoint doesn’t handle redirections a…

---

## [External Users can access Workshop but not OSDK React application?](https://community.palantir.com/t/external-users-can-access-workshop-but-not-osdk-react-application/6138)

<div class="topic-metadata">

**Author:** [@rovshify](https://community.palantir.com/u/rovshify)\
**Replies:** 11\
**Last updated:** [March 13, 2026, 2:20pm UTC](https://community.palantir.com/t/external-users-can-access-workshop-but-not-osdk-react-application/6138 "2026-03-13T14:20:24Z")

</div>

I have set up an SAML connection for authenticating External Users, and I am able to redirect the users to Workshop Applications in my Foundry instance. However, when I change the Home page URL configuration for this or…

---

## [Foundry OAuth when using OSDK : Logout issue](https://community.palantir.com/t/foundry-oauth-when-using-osdk-logout-issue/1768)

<div class="topic-metadata">

**Author:** [@alaa-patient1st](https://community.palantir.com/u/alaa-patient1st)\
**Replies:** 8\
**Last updated:** [January 12, 2026, 3:18pm UTC](https://community.palantir.com/t/foundry-oauth-when-using-osdk-logout-issue/1768 "2026-01-12T15:18:23Z")

</div>

Hi there ! We’re using foundry as a backend for some client apps. When trying to implement a logout, I’ve found the following endpoint: /multipass/api/logout Unfortunately, this endpoint doesn’t handle redirections a…

---

## [Unable to refresh/access OIDC client credentials in self-service user directory](https://community.palantir.com/t/unable-to-refresh-access-oidc-client-credentials-in-self-service-user-directory/5482)

<div class="topic-metadata">

**Author:** [@Sathya07](https://community.palantir.com/u/Sathya07)\
**Replies:** 3\
**Last updated:** [November 24, 2025, 6:23pm UTC](https://community.palantir.com/t/unable-to-refresh-access-oidc-client-credentials-in-self-service-user-directory/5482 "2025-11-24T18:23:41Z")

</div>

Hi, We are trying to access the client credentials to scope out using it. But it appears to be greyed out and we are unable to access the secret, or refresh it. Any help on this ? Thanks

---

## [Access Foundry in Israel](https://community.palantir.com/t/access-foundry-in-israel/5535)

<div class="topic-metadata">

**Author:** [@yomargo](https://community.palantir.com/u/yomargo)\
**Replies:** 1\
**Last updated:** [November 24, 2025, 6:09pm UTC](https://community.palantir.com/t/access-foundry-in-israel/5535 "2025-11-24T18:09:33Z")

</div>

Hi, Is there any possibility of accessing Foundry in Israel or with a VPN? Thank you

---

## [Organization does not support adding external provider](https://community.palantir.com/t/organization-does-not-support-adding-external-provider/5472)

<div class="topic-metadata">

**Author:** [@Sathya07](https://community.palantir.com/u/Sathya07)\
**Replies:** 1\
**Last updated:** [November 18, 2025, 8:23am UTC](https://community.palantir.com/t/organization-does-not-support-adding-external-provider/5472 "2025-11-18T08:23:35Z")

</div>

Hi, I am using the Palantir Foundry trial instance, where we are trying to establish some sort of authentication between Foundry and external system. The idea is to ideally share some sort of trust or identity provider,…

---

## [Needs to Move Existing laptop Log on Passkey to New Mac Laptop](https://community.palantir.com/t/needs-to-move-existing-laptop-log-on-passkey-to-new-mac-laptop/5391)

<div class="topic-metadata">

**Author:** [@a0d0fdd379bee4c9fb5e](https://community.palantir.com/u/a0d0fdd379bee4c9fb5e)\
**Replies:** 1\
**Last updated:** [November 6, 2025, 11:39am UTC](https://community.palantir.com/t/needs-to-move-existing-laptop-log-on-passkey-to-new-mac-laptop/5391 "2025-11-06T11:39:53Z")

</div>

Hi, I have Passkey set up on my existing Windows laptops, but I got new Mac laptops. How to transfer? I am trying to scan a barcode from a Mac laptop using an iPhone, but it’s not working. Please give me the steps. Th…

---

## [OAuth2 Webhook with (edit: or without) code challenge](https://community.palantir.com/t/oauth2-webhook-with-edit-or-without-code-challenge/4811)

<div class="topic-metadata">

**Author:** [@Joel](https://community.palantir.com/u/Joel)\
**Replies:** 15\
**Last updated:** [September 19, 2025, 12:19am UTC](https://community.palantir.com/t/oauth2-webhook-with-edit-or-without-code-challenge/4811 "2025-09-19T00:19:35Z")

</div>

I’m trying to learn OAuth2 and webhooks by getting data from my Fitbit account. From experimenting with Postman, I’ve found that the following authentication link works: https://www.fitbit.com/oauth2/authorize?response…

---

## [Restricted views across branches](https://community.palantir.com/t/restricted-views-across-branches/4565)

<div class="topic-metadata">

**Author:** [@0902eeaef68b05676b95](https://community.palantir.com/u/0902eeaef68b05676b95)\
**Replies:** 1\
**Last updated:** [September 11, 2025, 7:02pm UTC](https://community.palantir.com/t/restricted-views-across-branches/4565 "2025-09-11T19:02:54Z")

</div>

Hi all - I’m working with restricted views, and one pitfall I’m running into is that I’m not in the client dataset to actually be able to see the data per my rules (making building/demoing difficult). My current approac…

---

## [Authentication Providers Domain Name Case Sensitivity](https://community.palantir.com/t/authentication-providers-domain-name-case-sensitivity/1250)

<div class="topic-metadata">

**Author:** [@max](https://community.palantir.com/u/max)\
**Replies:** 0\
**Last updated:** [September 10, 2024, 10:55am UTC](https://community.palantir.com/t/authentication-providers-domain-name-case-sensitivity/1250 "2024-09-10T10:55:54Z")

</div>

I noticed some of my users were struggling to log in occasionally and receiving the error message Login Error: Login failed as a suitable authentication provider could not be located. Please contact your administra…

---

## [OAuth2 Webhook Error (reposting, now with video)](https://community.palantir.com/t/oauth2-webhook-error-reposting-now-with-video/4952)

<div class="topic-metadata">

**Author:** [@Joel](https://community.palantir.com/u/Joel)\
**Replies:** 0\
**Last updated:** [September 4, 2025, 5:13am UTC](https://community.palantir.com/t/oauth2-webhook-error-reposting-now-with-video/4952 "2025-09-04T05:13:47Z")

</div>

This is a follow-up on this post: https://community.palantir.com/t/oauth2-webhook-with-code-challenge/4811?u=joel. I’ve created a screen recording of my issue, and it’s viewable here: https://youtu.be/0d\_Lxa\_rQFc. In t…

---

## [Alert Workflow for Token Expiration](https://community.palantir.com/t/alert-workflow-for-token-expiration/1084)

<div class="topic-metadata">

**Author:** [@nGemo](https://community.palantir.com/u/nGemo)\
**Replies:** 3\
**Last updated:** [February 14, 2025, 10:55am UTC](https://community.palantir.com/t/alert-workflow-for-token-expiration/1084 "2025-02-14T10:55:34Z")

</div>

I want to build an alert workflow that will remind and inform our users of when their user tokens that they’ve initiated in Settings → Tokens-\>Create New Token. Is there an API endpoint or similar process I can leverage…

---

## [OSDK oauth with dynamic subdomains](https://community.palantir.com/t/osdk-oauth-with-dynamic-subdomains/4864)

<div class="topic-metadata">

**Author:** [@erik](https://community.palantir.com/u/erik)\
**Replies:** 7\
**Last updated:** [August 28, 2025, 4:46pm UTC](https://community.palantir.com/t/osdk-oauth-with-dynamic-subdomains/4864 "2025-08-28T16:46:33Z")

</div>

I’m trying to get the OSDK oauth flow to work with arbitrary subdomains. For example, our application runs on some.app.domain, but I would also like to make it work on foo.some.app.domain and bar.some.app.domain. Since t…

---

## [OIDC struggle with auth0 getting: getting: Login Error Second factor of authentication failed](https://community.palantir.com/t/oidc-struggle-with-auth0-getting-getting-login-error-second-factor-of-authentication-failed/4773)

<div class="topic-metadata">

**Author:** [@97009a9078361e5b75d8](https://community.palantir.com/u/97009a9078361e5b75d8)\
**Replies:** 0\
**Last updated:** [August 14, 2025, 6:26am UTC](https://community.palantir.com/t/oidc-struggle-with-auth0-getting-getting-login-error-second-factor-of-authentication-failed/4773 "2025-08-14T06:26:29Z")

</div>

Hi all, Trying to set up an auth0 login via OIDC to my app in the developer console. In the test in foundry I get a fail with the error “Login Error Second factor of authentication failed” . after I login via OIDC seems…

---

## [Configure Auth to avoid users entering username twice](https://community.palantir.com/t/configure-auth-to-avoid-users-entering-username-twice/4686)

<div class="topic-metadata">

**Author:** [@asikiaridis](https://community.palantir.com/u/asikiaridis)\
**Replies:** 0\
**Last updated:** [August 4, 2025, 1:09pm UTC](https://community.palantir.com/t/configure-auth-to-avoid-users-entering-username-twice/4686 "2025-08-04T13:09:19Z")

</div>

Hi, When users log in to my Foundry instance, they are prompted to enter their e-mail address. That will then redirect them to one of two configured IdP’s, based on their email address - and in the vast majority of case…

---

## [Username collisions by realm](https://community.palantir.com/t/username-collisions-by-realm/1064)

<div class="topic-metadata">

**Author:** [@nsweeney](https://community.palantir.com/u/nsweeney)\
**Replies:** 1\
**Last updated:** [August 19, 2024, 1:53pm UTC](https://community.palantir.com/t/username-collisions-by-realm/1064 "2024-08-19T13:53:41Z")

</div>

Am I correct that username collisions can only happen within the same realm? ie, if a user is getting a “Cannot complete login for your user with provider ID and username XYZ because the username XYZ is already being us…

---

## [Foundry OAuth Token Expiration and Tableau Integration](https://community.palantir.com/t/foundry-oauth-token-expiration-and-tableau-integration/4494)

<div class="topic-metadata">

**Author:** [@Hogehoge](https://community.palantir.com/u/Hogehoge)\
**Replies:** 1\
**Last updated:** [July 15, 2025, 10:35am UTC](https://community.palantir.com/t/foundry-oauth-token-expiration-and-tableau-integration/4494 "2025-07-15T10:35:50Z")

</div>

I am using Foundry OAuth authentication to log in and link with Tableau. URL However, due to the access token expiring, re-authentication occurs at regular intervals. I would like to ask the following questions. What…

---

## [Foundry API Endpoint To Update User Email](https://community.palantir.com/t/foundry-api-endpoint-to-update-user-email/4205)

<div class="topic-metadata">

**Author:** [@comad123](https://community.palantir.com/u/comad123)\
**Replies:** 4\
**Last updated:** [June 16, 2025, 7:09am UTC](https://community.palantir.com/t/foundry-api-endpoint-to-update-user-email/4205 "2025-06-16T07:09:23Z")

</div>

Is there an endpoint that will allow me to change user details? I see endpoints in the API docs that get user information but nothing that will update user details. I have a webhook that will invoke the “user update” Fo…

---

## [API Version 2.0](https://community.palantir.com/t/api-version-2-0/4213)

<div class="topic-metadata">

**Author:** [@sundaraji](https://community.palantir.com/u/sundaraji)\
**Replies:** 0\
**Last updated:** [June 13, 2025, 6:17pm UTC](https://community.palantir.com/t/api-version-2-0/4213 "2025-06-13T18:17:58Z")

</div>

Palantir API throw following error for the API V2.0 Create Build command in reference Create Build • API Reference • Palantir. What is the fix? {“errorCode”:“INVALID\_ARGUMENT”,“errorName”:“InvalidJson”,“errorInstanceId”…

---

## [Unable to add a new passkey](https://community.palantir.com/t/unable-to-add-a-new-passkey/4135)

<div class="topic-metadata">

**Author:** [@RajKarri](https://community.palantir.com/u/RajKarri)\
**Replies:** 1\
**Last updated:** [June 7, 2025, 3:30pm UTC](https://community.palantir.com/t/unable-to-add-a-new-passkey/4135 "2025-06-07T15:30:49Z")

</div>

It’s stuck in re-authentication page when I tried to add a new passkey. I was pushed back to home screen instead of successful reauthentication. It’s kind of stacking window on top of window when I continued.

---

## [No ACS URL for Google SSO](https://community.palantir.com/t/no-acs-url-for-google-sso/3565)

<div class="topic-metadata">

**Author:** [@jackmiller2003](https://community.palantir.com/u/jackmiller2003)\
**Replies:** 0\
**Last updated:** [April 17, 2025, 9:23am UTC](https://community.palantir.com/t/no-acs-url-for-google-sso/3565 "2025-04-17T09:23:58Z")

</div>

I am trying to connect google as an SSO provider using their SAML app integration with Google Workspace. They require an ACS URL but I cannot find it in the new Palantir control panel. It appears in the following doc but…

---

## [Detect Foundry domain in Workshop custom widget](https://community.palantir.com/t/detect-foundry-domain-in-workshop-custom-widget/3536)

<div class="topic-metadata">

**Author:** [@erik](https://community.palantir.com/u/erik)\
**Replies:** 0\
**Last updated:** [April 15, 2025, 12:19pm UTC](https://community.palantir.com/t/detect-foundry-domain-in-workshop-custom-widget/3536 "2025-04-15T12:19:11Z")

</div>

We are developing a custom widget for use in Workshop. This widget uses the OSDK for API access, so it needs an authenticated session. However, this poses a problem during development, since we have two different top-lev…

[Next page](https://community.palantir.com/tag/authentication/71.md?match_all_tags=true&page=1&tags%5B%5D=authentication)
