Skip to content

The v1 docs follow nauthera-server's main branch and its 0.x releases on the way to 1.0, so fields and APIs can still change.

v1

account_selection_required

Docs version v1 (main)Nauthera is pre-1.0, in a design-partner program

The request asked the user to choose an account, which this server cannot offer (OpenID Connect Core 1.0 §3.1.2.6).

Meaning

Sent by /authorize (redirected to the client) and /par when the request carries prompt=select_account. The server keeps one session per browser per organization, so there is no set of accounts to choose from.

Impact

The flow stops before any screen and the user is returned to the application. It is a client choice the server cannot honor, not an outage.

Diagnosis

The audit record under oauth.authorization.requested has reason account_selection_required and cause account_selection_unsupported. Check the prompt the client sends.

Mitigation

  • As a client developer: to let a user switch accounts, send prompt=login instead, which this server honors.
  • As an operator: nothing to change on the server.
  • As a user: tell the application's owner.

Escalation

Not expected to change without a feature request; raise one if multiple sessions per browser are needed.

OAuth error runbooks · Generated from internal/runbook/oauth.yaml in nauthera-server.