# Everest SSO with Authelia IDP
**URL:** https://forums.percona.com/t/everest-sso-with-authelia-idp/40022
**Category:** Percona Everest
**Created:** [January 9, 2026, 8:32pm UTC](https://forums.percona.com/t/everest-sso-with-authelia-idp/40022 "2026-01-09T20:32:59Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Iaroslav\_Tverdokhlib](https://forums.percona.com/u/Iaroslav_Tverdokhlib)
#### Post date: [January 9, 2026, 8:32pm UTC](https://forums.percona.com/t/everest-sso-with-authelia-idp/40022/1 "2026-01-09T20:32:59Z")
Hi,
Does anybody have experience with Authelia?
Following Everest manual gives me “message=missing or malformed jwt, internal=missing value in request header" on Everest side, but all good on Authelia.
---
### Author:  [@Till](https://forums.percona.com/u/Till)
#### Post date: [January 10, 2026, 5:30pm UTC](https://forums.percona.com/t/everest-sso-with-authelia-idp/40022/2 "2026-01-10T17:30:25Z")
I forgot what it is called, but e.g. on Azure there was an option for SPAs which needed to be enabled. I think I got the same error otherwise.
---
### Author:  [@Iaroslav\_Tverdokhlib](https://forums.percona.com/u/Iaroslav_Tverdokhlib)
#### Post date: [January 10, 2026, 6:17pm UTC](https://forums.percona.com/t/everest-sso-with-authelia-idp/40022/3 "2026-01-10T18:17:12Z")
I think such SPA option is just for enabling OIDC PKCE flow which is configured on Authelia side.
Will try to debug via headers, maybe there is misconfiguration at some point.
---
### Author:  [@Iaroslav\_Tverdokhlib](https://forums.percona.com/u/Iaroslav_Tverdokhlib)
#### Post date: [January 10, 2026, 9:38pm UTC](https://forums.percona.com/t/everest-sso-with-authelia-idp/40022/4 "2026-01-10T21:38:26Z")
done,
`access_token_signed_response_alg: ‘RS256’` should be set on Authelia side.
Somehow I thought that it was enabled by default