BerriAI/litellm · error · ValueError

Unsupported OIDC provider

Error message

Unsupported OIDC provider

What it means

Terminal dispatch guard in the OIDC provider chain: oidc_provider matched none of the supported providers (google, circleci, circleci_v2, github, azure, file, env, env_path). Sentinel error for an unrecognized provider string.

Source

Thrown at litellm/secret_managers/main.py:313

            with open(safe_path, "r") as f:
                oidc_token = f.read()
                return oidc_token
        elif oidc_provider == "env":
            # Load token directly from an environment variable
            oidc_token = os.getenv(oidc_aud)
            if oidc_token is None:
                raise ValueError(f"Environment variable {oidc_aud} not found")
            return oidc_token
        elif oidc_provider == "env_path":
            # Load token from a file path specified in an environment variable
            token_file_path: Final = os.getenv(oidc_aud)
            if token_file_path is None:
                raise ValueError(f"Environment variable {oidc_aud} not found")
            with open(token_file_path, "r") as f:
                oidc_token = f.read()
                return oidc_token
        else:
            raise ValueError("Unsupported OIDC provider")

    try:
        if _should_read_secret_from_secret_manager() and litellm.secret_manager_client is not None:
            try:
                client: Final = litellm.secret_manager_client
                key_manager = "local"
                if key_management_system is not None:
                    key_manager = key_management_system.value

                if key_management_settings is not None:
                    if (
                        key_management_settings.hosted_keys is not None
                        and secret_name not in key_management_settings.hosted_keys
                    ):  # allow user to specify which keys to check in hosted key manager
                        key_manager = "local"

                # Delegate to the secret manager handler
                secret = get_secret_from_manager(

View on GitHub (pinned to 77b7c6c40c)

Solutions

  1. Use a supported OIDC provider prefix: oidc/google/, oidc/github/, oidc/azure/, oidc/circleci/, oidc/file/, or oidc/env/.
Defensive patterns

Strategy: validation

When it happens

Trigger: Thrown at litellm/secret_managers/main.py:313 when the library encounters an invalid state.

Common situations: See trigger scenarios.


AI-assisted analysis of BerriAI/litellm@77b7c6c40c (2026-08-18). Data as JSON: /api/errors/9d9f80e31cb70c22. Report an issue: GitHub.