Mintplex-Labs/anything-llm · error

Login via credentials has been disabled by the administrator

Error message

Login via credentials has been disabled by the administrator.

What it means

Policy guard in simpleSSOLoginDisabledMiddleware: SIMPLE_SSO_ENABLED and SIMPLE_SSO_NO_LOGIN are both set in multi-user mode, so password login has been administratively disabled and credential-based login attempts are refused with 403.

Source

Thrown at server/utils/middleware/simpleSSOEnabled.js:71

 * SIMPLE_SSO_NO_LOGIN environment variable is set as well as
 * SIMPLE_SSO_ENABLED is set.
 *
 * This middleware will 403 if SSO is enabled and no login is allowed and
 * the system is in multi-user mode. Otherwise, it will call next.
 *
 * @param {import("express").Request} request
 * @param {import("express").Response} response
 * @param {import("express").NextFunction} next
 * @returns {void}
 */
async function simpleSSOLoginDisabledMiddleware(_, response, next) {
  if (!("multiUserMode" in response.locals)) {
    const multiUserMode = await SystemSettings.isMultiUserMode();
    response.locals.multiUserMode = multiUserMode;
  }

  if (response.locals.multiUserMode && simpleSSOLoginDisabled()) {
    response.status(403).json({
      success: false,
      error: "Login via credentials has been disabled by the administrator.",
    });
    return;
  }
  next();
}

module.exports = {
  simpleSSOEnabled,
  simpleSSOLoginDisabled,
  simpleSSOLoginDisabledMiddleware,
};

View on GitHub (pinned to 3aec848f28)

Solutions

  1. Log in via the configured SSO provider instead of username/password.
  2. To re-enable credential login, remove the SIMPLE_SSO_NO_LOGIN environment variable and restart.
Defensive patterns

Strategy: validation

When it happens

Trigger: Credential-based login attempted while disabled by the administrator. Triggered when the simple SSO middleware blocks username/password login (simpleSSOEnabled.js:71).

Common situations: See trigger scenarios.


AI-assisted analysis of Mintplex-Labs/anything-llm@3aec848f28 (2026-08-18). Data as JSON: /api/errors/3bece4ea00797746. Report an issue: GitHub.