Mintplex-Labs/anything-llm · error

Multi-User mode is not enabled. It must be enabled to use Si

Error message

Multi-User mode is not enabled. It must be enabled to use Simple SSO.

What it means

Mode guard in the simpleSSOEnabled middleware: SIMPLE_SSO_ENABLED passed its env check but SystemSettings.isMultiUserMode() returned false, and Simple SSO temporary tokens only make sense in multi-user mode, so the route is refused with 403.

Source

Thrown at server/utils/middleware/simpleSSOEnabled.js:28

 */
async function simpleSSOEnabled(_, response, next) {
  if (!("SIMPLE_SSO_ENABLED" in process.env)) {
    return response
      .status(403)
      .send(
        "Simple SSO is not enabled. It must be enabled to validate or issue temporary auth tokens."
      );
  }

  // If the multi-user mode response local is not set, we need to check if it's enabled.
  if (!("multiUserMode" in response.locals)) {
    const multiUserMode = await SystemSettings.isMultiUserMode();
    response.locals.multiUserMode = multiUserMode;
  }

  if (!response.locals.multiUserMode) {
    return response
      .status(403)
      .send(
        "Multi-User mode is not enabled. It must be enabled to use Simple SSO."
      );
  }

  next();
}

/**
 * Checks if simple SSO login is disabled by checking if the
 * SIMPLE_SSO_NO_LOGIN environment variable is set as well as
 * SIMPLE_SSO_ENABLED is set.
 *
 * This check should only be run when in multi-user mode when used.
 * @returns {boolean}
 */
function simpleSSOLoginDisabled() {
  return (

View on GitHub (pinned to 3aec848f28)

Solutions

1. Enable Multi-User mode in the instance security settings — Simple SSO requires multi-user mode.
2. Restart the server after changing the mode so the middleware picks up the setting.

When it happens

Trigger: Simple SSO attempted while multi-user mode is disabled. Triggered when SSO flow runs but the instance is in single-user mode (simpleSSOEnabled.js:28).

Common situations: See trigger scenarios.

AI-assisted analysis of Mintplex-Labs/anything-llm@3aec848f28 (2026-08-18). Data as JSON: /api/errors/cc3001bb2fa57a13. Report an issue: GitHub.