BerriAI/litellm · error · ProxyException

GENERIC_CLIENT_SECRET not set. Set it in .env file

Error message

GENERIC_CLIENT_SECRET not set. Set it in .env file

What it means

Error "GENERIC_CLIENT_SECRET not set. Set it in .env file" thrown in BerriAI/litellm.

Source

Thrown at litellm/proxy/management_endpoints/ui_sso.py:1294

        user_role=user_role,
        extra_fields=extra_fields,
    )


def _setup_generic_sso_env_vars(
    generic_client_id: str, redirect_url: str
) -> tuple[str, list[str], str, str, str, bool]:
    """Setup and validate Generic SSO environment variables."""
    generic_client_secret: Final = os.getenv("GENERIC_CLIENT_SECRET", None)
    generic_scope: Final = os.getenv("GENERIC_SCOPE", "openid email profile").split(" ")
    generic_authorization_endpoint: Final = os.getenv("GENERIC_AUTHORIZATION_ENDPOINT", None)
    generic_token_endpoint: Final = os.getenv("GENERIC_TOKEN_ENDPOINT", None)
    generic_userinfo_endpoint: Final = os.getenv("GENERIC_USERINFO_ENDPOINT", None)
    generic_include_client_id: Final = os.getenv("GENERIC_INCLUDE_CLIENT_ID", "false").lower() == "true"

    # Validate required environment variables
    if generic_client_secret is None:
        raise ProxyException(
            message="GENERIC_CLIENT_SECRET not set. Set it in .env file",
            type=ProxyErrorTypes.auth_error,
            param="GENERIC_CLIENT_SECRET",
            code=status.HTTP_500_INTERNAL_SERVER_ERROR,
        )
    if generic_authorization_endpoint is None:
        raise ProxyException(
            message="GENERIC_AUTHORIZATION_ENDPOINT not set. Set it in .env file",
            type=ProxyErrorTypes.auth_error,
            param="GENERIC_AUTHORIZATION_ENDPOINT",
            code=status.HTTP_500_INTERNAL_SERVER_ERROR,
        )
    if generic_token_endpoint is None:
        raise ProxyException(
            message="GENERIC_TOKEN_ENDPOINT not set. Set it in .env file",
            type=ProxyErrorTypes.auth_error,
            param="GENERIC_TOKEN_ENDPOINT",
            code=status.HTTP_500_INTERNAL_SERVER_ERROR,

View on GitHub (pinned to 77b7c6c40c)

Solutions

1. Set GENERIC_CLIENT_SECRET in the .env file and restart the proxy.

When it happens

Trigger: Thrown at litellm/proxy/management_endpoints/ui_sso.py:1294 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of BerriAI/litellm@77b7c6c40c (2026-08-18). Data as JSON: /api/errors/1f7dd8a354794f83. Report an issue: GitHub.