Rewindex

ChangesngrokOAuth, OIDC, and SAML modules for Edges degraded

ngrok: Major incident: OAuth, OIDC, and SAML modules for Edges degraded

Major incidentmajor (vendor)Changed Detected stspg.io (opens in new tab)
Summary

Summary pending. The diff below shows exactly what changed.

Incident page: the full timeline of updates

What changed

Struck in red is what ngrok removed; blue is what they added. Muted text is unchanged context.

AddedTitle#1
Before: not present
After: OAuth, OIDC, and SAML modules for Edges degraded
AddedImpact#2
Before: not present
After: major
AddedStatus#3
Before: not present
After: resolved
AddedStart time#4
Before: not present
After: 2024-02-07 19:43 UTC
AddedResolved time#5
Before: not present
After: 2024-02-07 20:09 UTC
AddedAffected components#6
Before: not present
After: Endpoint Connectivity - Region - AP, Endpoint Connectivity - Region - AU, Endpoint Connectivity - Region - EU, Endpoint Connectivity - Region - IN, Endpoint Connectivity - Region - JP, Endpoint Connectivity - Region - SA, Endpoint Connectivity - Region - US, Endpoint Connectivity - Region - us-cal-1, Region - AP, Region - AU, Region - EU, Region - IN, Region - JP, Region - SA, Region - US, Region - us-cal-1
AddedUpdateidentified#7
Before: not present
After: We have identified an issue with the following Edge modules that may be impacting customers' ability to access content served by the Edge: OAuth, OIDC, and SAML. We are rolling out a fix and monitoring. This issue started approximately ten minutes ago.
AddedUpdatemonitoring#8
Before: not present
After: Fixes are rolled out. The team will continue monitoring to confirm a full recovery.
AddedUpdatemonitoring#9
Before: not present
After: Customers using SAML modules may in rare cases need to clear cookies if you are seeing `BAD REQUEST` errors on login.
AddedUpdateresolved#10
Before: not present
After: The system should be recovered for all users.

First version of this incident archived by Rewindex. View the live incident (opens in new tab).

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert.

How the archive is checked, and what it cannot prove.

Rewindex captured this after the last checkpoint; the next run (00:41 UTC) commits it.

This incident predates live tracking (October 17, 2026). It came from the vendor’s own published history, which is not covered by checkpoints.

History of this incident

Wednesday, February 7, 2024

1 incident change

All ngrok changesngrok profileMarkdownJSON