# account_selection_required

The request asked the user to choose an account, which this server cannot offer (OpenID Connect Core 1.0 §3.1.2.6).

## Meaning

Sent by `/authorize` (redirected to the client) and `/par` when the request carries
`prompt=select_account`. The server keeps one session per browser per organization, so
there is no set of accounts to choose from.

## Impact

The flow stops before any screen and the user is returned to the application. It is a
client choice the server cannot honor, not an outage.

## Diagnosis

The audit record under `oauth.authorization.requested` has reason
`account_selection_required` and cause `account_selection_unsupported`. Check the
`prompt` the client sends.

## Mitigation

- As a client developer: to let a user switch accounts, send `prompt=login` instead, which
  this server honors.
- As an operator: nothing to change on the server.
- As a user: tell the application's owner.

## Escalation

Not expected to change without a feature request; raise one if multiple sessions per
browser are needed.

---

[OAuth error runbooks](https://www.nauthera.io/docs/v1/runbooks/oauth) · Generated from [`internal/runbook/oauth.yaml`](https://github.com/nauthera/nauthera-server/blob/main/internal/runbook/oauth.yaml) in nauthera-server.