# Bug OP-17883 - Can't update OIDC provider via environment variables

Project: OpenProject
Status: tested
URL: https://community.openproject.org/work_packages/OP-17883

## Open points

_No work packages_

## Details

| Attribute | Value |
| --- | --- |
| Date |  |
| Priority | Medium |
| Module | Authentication / OpenID Connect (OIDC) |
| Target versions | 16.4.1 |
| Observed in versions | 16.4.0 |
| Sprint | 16.4.1 |
| Backlog bucket |  |
| Bug found in version (deprecated) | 16.4.x |
| Found in mobile app version |  |
| Follow-up feedback e-mail |  |
| Requires doc change | No |
| Accessibility | No |
| Pull preview |  |
| List |  |
| Labels |  |

## People

| Attribute | Value |
| --- | --- |
| Assignee |  |
| Accountable |  |
| Product manager |  |
| Developers | Jan Sandbrink |
| Designer |  |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Planning

| Attribute | Value |
| --- | --- |
| Relevance |  |

## Costs

| Attribute | Value |
| --- | --- |
| Votes |  |
| Work |  |
| Labor costs |  |

## Description

### Steps to reproduce

1.  Configure an OpenProject instance that created an OIDC provider via environment variables in OpenProject 16.2

2.  Upgrade to OpenProject 16.4 and try to start the instance again

### What is the buggy behavior?

Seeding (update) of the OIDC provider fails because of a validation error (groups claim can't be blank).

### What is the expected behavior?

The previously valid OIDC configuration should still be considered valid.