BerriAI/litellm · error · HTTPException

{configured_provider.capitalize()} SSO is configured but mis

Error message

{configured_provider.capitalize()} SSO is configured but missing required environment variables: {', '.join(missing_vars)}

What it means

Error "{configured_provider.capitalize()} SSO is configured but missing required environment variables: {', '.join(missing_vars)}" thrown in BerriAI/litellm.

Source

Thrown at litellm/proxy/management_endpoints/ui_sso.py:2712

            missing_vars.append("GENERIC_CLIENT_SECRET")
        if generic_authorization_endpoint is None:
            missing_vars.append("GENERIC_AUTHORIZATION_ENDPOINT")
        if generic_token_endpoint is None:
            missing_vars.append("GENERIC_TOKEN_ENDPOINT")
        if generic_userinfo_endpoint is None:
            missing_vars.append("GENERIC_USERINFO_ENDPOINT")

    # If all required variables are present, return healthy
    if len(missing_vars) == 0:
        return {
            "status": "healthy",
            "sso_configured": True,
            "provider": configured_provider,
            "message": f"{configured_provider.capitalize()} SSO is properly configured",
        }

    # If some variables are missing, return unhealthy
    raise HTTPException(
        status_code=503,
        detail={
            "status": "unhealthy",
            "sso_configured": True,
            "provider": configured_provider,
            "missing_environment_variables": missing_vars,
            "message": f"{configured_provider.capitalize()} SSO is configured but missing required environment variables: {', '.join(missing_vars)}",
        },
    )


def _is_same_origin_return_path(return_to: str) -> bool:
    """True for a strictly relative return path that stays on the gateway's own origin by
    construction, and is therefore safe to honor without a configured ``control_plane_url``.
    Used by the MCP gateway DCR authorize round-trip so a browser sent through login lands
    back on the authorize request.

    Requires a single leading ``/`` (not protocol-relative ``//``), no backslash (browsers

View on GitHub (pinned to 77b7c6c40c)

Solutions

1. Set the missing environment variables listed in the error for the configured SSO provider, then restart.

When it happens

Trigger: Thrown at litellm/proxy/management_endpoints/ui_sso.py:2712 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of BerriAI/litellm@77b7c6c40c (2026-08-18). Data as JSON: /api/errors/9d38aa74a52f774b. Report an issue: GitHub.