{"record":{"id":"9d38aa74a52f774b","repo":"BerriAI/litellm","slug":"configured-provider-capitalize-sso-is-configur","errorCode":null,"errorMessage":"{configured_provider.capitalize()} SSO is configured but missing required environment variables: {', '.join(missing_vars)}","messagePattern":"(.+?) SSO is configured but missing required environment variables: (.+?)","errorType":"http","errorClass":"HTTPException","httpStatus":503,"severity":"error","filePath":"litellm/proxy/management_endpoints/ui_sso.py","lineNumber":2712,"sourceCode":"            missing_vars.append(\"GENERIC_CLIENT_SECRET\")\n        if generic_authorization_endpoint is None:\n            missing_vars.append(\"GENERIC_AUTHORIZATION_ENDPOINT\")\n        if generic_token_endpoint is None:\n            missing_vars.append(\"GENERIC_TOKEN_ENDPOINT\")\n        if generic_userinfo_endpoint is None:\n            missing_vars.append(\"GENERIC_USERINFO_ENDPOINT\")\n\n    # If all required variables are present, return healthy\n    if len(missing_vars) == 0:\n        return {\n            \"status\": \"healthy\",\n            \"sso_configured\": True,\n            \"provider\": configured_provider,\n            \"message\": f\"{configured_provider.capitalize()} SSO is properly configured\",\n        }\n\n    # If some variables are missing, return unhealthy\n    raise HTTPException(\n        status_code=503,\n        detail={\n            \"status\": \"unhealthy\",\n            \"sso_configured\": True,\n            \"provider\": configured_provider,\n            \"missing_environment_variables\": missing_vars,\n            \"message\": f\"{configured_provider.capitalize()} SSO is configured but missing required environment variables: {', '.join(missing_vars)}\",\n        },\n    )\n\n\ndef _is_same_origin_return_path(return_to: str) -> bool:\n    \"\"\"True for a strictly relative return path that stays on the gateway's own origin by\n    construction, and is therefore safe to honor without a configured ``control_plane_url``.\n    Used by the MCP gateway DCR authorize round-trip so a browser sent through login lands\n    back on the authorize request.\n\n    Requires a single leading ``/`` (not protocol-relative ``//``), no backslash (browsers","sourceCodeStart":2694,"sourceCodeEnd":2730,"githubUrl":"https://github.com/BerriAI/litellm/blob/77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8/litellm/proxy/management_endpoints/ui_sso.py#L2694-L2730","documentation":"Error \"{configured_provider.capitalize()} SSO is configured but missing required environment variables: {', '.join(missing_vars)}\" thrown in BerriAI/litellm.","triggerScenarios":"Thrown at litellm/proxy/management_endpoints/ui_sso.py:2712 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Set the missing environment variables listed in the error for the configured SSO provider, then restart."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8","analyzedAt":"2026-08-18T11:44:31.656Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}