Authenticating to LibreChat using SAML

[ransaldo]

Probably not a bug, but some configuration error on my part, but I don't see a discussion area.

We have LibreChat installed and successfully authenticating our users with SAML2. I'm now trying to deploy librechat-admin-panel using Docker Compose. My .env and docker-compose.yml files:

.env

SESSION_SECRET=<redacted>
VITE_API_BASE_URL=https://<our url>
API_SERVER_URL=http://host.docker.internal:3080
PORT=3000
ADMIN_SSO_ONLY=true

docker-compose.yml:

services:
  admin-panel:
    image: ghcr.io/clickhouse/librechat-admin-panel:latest
    ports:
      - '${PORT:-3000}:${PORT:-3000}'
    restart: unless-stopped
    extra_hosts:
      - 'host.docker.internal:host-gateway'
    env_file: .env
    environment:
      - PORT=${PORT:-3000}

First, the SSO login button doesn't appear at all. Second, if I use an existing admin with username/password, I get the following in my log:
[checkOpenIdFn] OpenID check failed: 500 http://host.docker.internal:3080/api/admin/oauth/openid/check
And in the LibreChat docker logs:

1b22162d6ff3 2026-05-28 16:38:34 error: Passport Local Strategy - Validation Error
1b22162d6ff3 2026-05-28 16:38:34 error: [Login] [Login failed] [Username: mylocaluser@gmail.com] [Request-IP: 10.89.0.1]

Maybe if I could get the SSO button to show it would auth properly, but I can't seem to get past that.

[ransaldo]

One additional tidbit. When the login page loads, this error appears in the LibreChat instance logs:
1b22162d6ff3 2026-05-28 17:34:54 error: ErrorController => error OpenID client is not initialized. Please call setupOpenId first.
I had been looking for errors after the username/password form was sent, but this precedes that.