Two Registered Providers - normal Loginpage not available anymore.

[ALX-495]

How to use GitHub

• Please use the 👍 reaction to show that you are affected by the same issue.
• Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
• Subscribe to receive notifications on status change and new comments.

---

Steps to reproduce

1.Configure two SAML Providers and keep the loginpage enabled.
2.Open URL Always get directed towards https://name.domain.com/apps/user_saml/saml/selectUserBackEnd?redirectUrl= instead of https://name.domain.com/login

Second SAML uses name claim instead.

Expected behaviour

The full loginpage should be visible with two SSO providers and the Loginoptions. As shown here when it works with one.

Actual behaviour

Only SAML/SSO Login is available

Server configuration

Web server: Nginx

Database: Maria

PHP version: 8.4.16

Nextcloud version: 34.0.2

List of activated apps

Enabled:
  - activity: 7.0.0
  - admin_audit: 1.24.0
  - appstore: 1.0.0
  - bruteforcesettings: 7.0.0
  - circles: 34.0.0
  - cloud_federation_api: 1.18.0
  - contacts: 8.7.5
  - dav: 1.39.0
  - federatedfilesharing: 1.24.0
  - files: 2.6.0
  - files_antivirus: 6.3.2
  - files_automatedtagging: 5.0.0
  - files_downloadlimit: 5.2.0
  - files_lock: 34.0.1
  - files_pdfviewer: 7.0.0-dev.0
  - files_retention: 5.0.0
  - files_sharing: 1.26.0
  - files_trashbin: 1.24.0
  - files_versions: 1.27.0
  - groupfolders: 22.0.6
  - guests: 4.8.0
  - logreader: 7.0.0
  - lookup_server_connector: 1.22.0
  - notifications: 7.0.0-dev.1
  - oauth2: 1.22.0
  - password_policy: 6.0.0-dev.0
  - privacy: 6.0.0-dev.1
  - profile: 1.3.0
  - provisioning_api: 1.24.0
  - serverinfo: 6.0.0
  - settings: 1.17.0
  - share_audit_dashboard: 0.4.0
  - sharebymail: 1.24.0
  - survey_client: 6.0.0-dev.0
  - systemtags: 1.24.0
  - text: 8.0.0
  - theming: 2.9.0
  - twofactor_backupcodes: 1.23.0
  - twofactor_totp: 16.0.0
  - updatenotification: 1.24.0
  - user_saml: 8.2.0
  - user_usage_report: 5.0.2
  - viewer: 7.0.0-dev.0
  - workflowengine: 2.16.0
Disabled:
  - app_api: 34.0.0 (installed 34.0.0)
  - comments: 1.24.0 (installed 1.24.0)
  - contactsinteraction: 1.15.0 (installed 1.15.0)
  - dashboard: 7.14.0 (installed 7.14.0)
  - encryption: 2.22.0
  - federation: 1.24.0 (installed 1.24.0)
  - files_external: 1.26.0
  - files_reminders: 1.7.0 (installed 1.7.0)
  - firstrunwizard: 7.0.0-dev.0 (installed 7.0.0-dev.0)
  - nextcloud_announcements: 6.0.0 (installed 6.0.0)
  - office: 1.0.0 (installed 1.0.0)
  - photos: 7.0.0 (installed 7.0.0)
  - recommendations: 7.0.0 (installed 7.0.0)
  - related_resources: 5.0.0-dev.0 (installed 5.0.0-dev.0)
  - support: 6.0.0 (installed 6.0.0)
  - suspicious_login: 12.0.0-dev.0
  - twofactor_nextcloud_notification: 8.0.0
  - user_ldap: 1.25.0 (installed 1.25.0)
  - user_status: 1.14.0 (installed 1.14.0)
  - weather_status: 1.14.0 (installed 1.14.0)
  - webhook_listeners: 1.6.0 (installed 1.6.0)

Nextcloud configuration

{
    "system": {
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "scvnextcloud01:8443",
            "name.domain.com"
        ],
        "dbtype": "mysql",
        "version": "34.0.2.1",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbtableprefix": "oc_",
        "mysql.utf8mb4": true,
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "skeletondirectory": "",
        "memcache.distributed": "\\OC\\Memcache\\Redis",
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "port": 6379
        },
        "memcache.local": "\\OC\\Memcache\\APCu",
        "filelocking.enabled": true,
        "upgrade.disable-web": true,
        "maintenance": false,
        "app_install_overwrite": [],
        "trusted_proxies": "***REMOVED SENSITIVE VALUE***",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpmode": "smtp",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "25",
        "mail_sendmailmode": "smtp",
        "mail_smtpstreamoptions": {
            "ssl": {
                "allow_self_signed": false,
                "verify_peer": true,
                "verify_peer_name": true
            }
        },
        "forbidden_filename_basenames": [
            "con",
            "prn",
            "aux",
            "nul",
            "com0",
            "com1",
            "com2",
            "com3",
            "com4",
            "com5",
            "com6",
            "com7",
            "com8",
            "com9",
            "com\u00b9",
            "com\u00b2",
            "com\u00b3",
            "lpt0",
            "lpt1",
            "lpt2",
            "lpt3",
            "lpt4",
            "lpt5",
            "lpt6",
            "lpt7",
            "lpt8",
            "lpt9",
            "lpt\u00b9",
            "lpt\u00b2",
            "lpt\u00b3"
        ],
        "forbidden_filename_characters": [
            "<",
            ">",
            ":",
            "\"",
            "|",
            "?",
            "*",
            "\\",
            "\/"
        ],
        "forbidden_filename_extensions": [
            " ",
            ".",
            ".filepart",
            ".part"
        ],
        "twofactor_enforced": "true",
        "twofactor_enforced_groups": [
            "guest_app",
            "admin",
            "Extern",
            "domain"
        ],
        "twofactor_enforced_excluded_groups": [],
        "maintenance_window_start": 2,
        "serverid": "0",
        "default_phone_region": "AT",
        "default_language": "en",
        "default_timezone": "Europe\/Vienna",
        "default_locale": "en_AT",
        "loglevel": 2,
        "overwritehost": "name.domain.com",
        "overwriteprotocol": "https",
        "overwrite.cli.url": "https:\/\/name.domain.com"
    }
}

Browser

Browser name: Firefox/Edge

Browser version: 140.12.0esr/150.0.4078.83

Operating system: Windows

Details

It does work normally with one provider.
As soon as a second provider is added it seems to enforce the SAML Webpage instead.
The second provider exists for the following reason. Admins in Azure without Email cannot be used identically.
For this reason we wanted to enable a second provider just for the Admins.
Since the normal login is still available for external users this would pose an issue for them.