What happened?

I followed the instructions here to set up OpenID using Azure Entra. I do not want to restrict access by groups; I just want any user in my tenant to be able to access LibreChat.

I received an "Internal Server Error" when logging in using OpenID.

I fixed this by adding the OPENID_REQUIRED_ROLE_TOKEN_KIND=id environment variable. The documentation lists it under a comment that says you should add this if you want to restrict access by groups, but it seems like that one is needed always. I didn't add the other two settings listed there, and it's working now.

Steps to Reproduce

1. Setup LibreChat in Azure following the instructions for Azure Entra/AD.
2. Do not set the OPENID_REQUIRED_ROLE_TOKEN_KIND environment variable
3. Run the app, log in with OpenID -> Internal Server Error