Can not configrue federated Teams (Circles)

The Basics

  • Nextcloud Server version (e.g., 29.x.x):
    • 32.0.6
  • Operating system and version (e.g., Ubuntu 24.04):
    • Ubuntu 24.04.4
  • Web server and version (e.g, Apache 2.4.25):
    • One server (A) on Nginx 1.24.0-2ubuntu7.6, two servers (B) on Apache 2.4.66-1~deb13u1
  • Reverse proxy and version _(e.g. nginx 1.27.2)
    • (A) No reverse proxy, (B) Traefik 3.6
  • PHP version (e.g, 8.3):
    • (A) 8.3.6, (B) 8.3.30
  • Is this the first time you’ve seen this error? (Yes / No):
    • Yes
  • When did this problem seem to first start?
    • Don't know
  • Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
    • (A)Bare metal, (B) Docker
  • Are you using CloudfIare, mod_security, or similar? (Yes / No)
    • No

Summary of the issue you are facing:

When configuring team, it’s not possible to add user from other federation, and there is no toggle to enable federated users for that team.

When doing occ –vvv circles:check, output is:

### Checking loopback address.

. The loopback setting is mandatory and can be checked locally.
. The address you need to define here must be a reachable url of your Nextcloud from the hosting server itself.
. By default, the App will use the entry ‘overwrite.cli.url’ from ‘config/config.php’.

* testing current address: <NC address>
- GET request on <NC address>/index.php/csrftoken: 200
- POST request on <NC address>/index.php/apps/circles/async/test-dummy-token/: 200
- Creating async FederatedEvent  (took 1ms)
- Waiting for async process to finish (5s)
- Checking status on FederatedEvent Event created too many Wrappers

- You do not have a valid loopback address setup right now.

Please write down a new loopback address to test:

NC address is correct address of Nextcloud instance; entering it as loopback address again, or running occ circles:check (without -vvv) yields

- POST request on <NC address>/index.php/apps/circles/async/test-dummy-token/: 401

Steps to replicate it (hint: details matter!):

  1. Do occ –vvv circles:check

  2. Create team

  3. Try adding federated user

Log entries

Nextcloud

No Nextcloud logs were generated by any of those actions.

Web server / Reverse Proxy

Log messages appear after running occ circles:check

Nginx access.log for instance A:

127.0.0.1 - - [16/Feb/2026:12:24:22 +0300] “GET /index.php/csrftoken HTTP/1.1” 200 121 “-” “”
127.0.0.1 - - [16/Feb/2026:12:24:22 +0300] “POST /index.php/apps/circles/async/test-dummy-token/ HTTP/1.1” 401 2 “-” “”

error.log did not have any new messages.

Container logs from one of instances B:

<container name> | 172.22.254.254 - - [16/Feb/2026:12:26:26 +0300] “GET /index.php/csrftoken HTTP/1.1” 200 1566 “-” “-”
<container name> | 172.22.254.254 - - [16/Feb/2026:12:26:26 +0300] “POST /index.php/apps/circles/async/test-dummy-token/ HTTP/1.1” 401 1421 “-” “-”

Configuration

Nextcloud

Instance A:

{                                                                                                                                                                                                  
    "system": {                                                                                                                                                                                    
        "instanceid": "***REMOVED SENSITIVE VALUE***",                                                                                                                                             
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",                                                                                                                                           
        "secret": "***REMOVED SENSITIVE VALUE***",                                                                                                                                                 
        "trusted_domains": [                                                                                                                                                                       
            "<domain name>",                                                                                                                                                                    
        ],                                                                                                                                                                                         
        "datadirectory": "***REMOVED SENSITIVE VALUE***",                                                                                                                                          
        "dbtype": "pgsql",                                                                                                                                                                         
        "version": "32.0.6.1",                                                                                                                                                                     
        "overwrite.cli.url": "https:\/\/<domain name>",                                                                                                                                         
        "dbname": "***REMOVED SENSITIVE VALUE***",                                                                                                                                                 
        "dbhost": "***REMOVED SENSITIVE VALUE***",                                                                                                                                                 
        "dbport": "",                                                                                                                                                                              
        "dbtableprefix": "oc_",                                                                                                                                                                    
        "dbuser": "***REMOVED SENSITIVE VALUE***",                                                                                                                                                 
        "dbpassword": "***REMOVED SENSITIVE VALUE***",                                                                                                                                             
        "installed": true,                                                                                                                                                                         
        "maintenance_window_start": 1,                                                                                                                                                             
        "memcache.local": "\\OC\\Memcache\\APCu",                                                                                                                                                  
        "memcache.distributed": "\\OC\\Memcache\\Redis",                                                                                                                                           
        "memcache.locking": "\\OC\\Memcache\\Redis",                                                                                                                                               
        "redis": {                                                                                                                                                                                 
            "host": "***REMOVED SENSITIVE VALUE***",                                                                                                                                               
            "port": 6379                                                                                                                                                                           
        },                                                                                                                                                                                         
        "default_phone_region": "RU",                                                                                                                                                              
        "skeletondirectory": "",                                                                                                                                                                   
        "maintenance": false,                                                                                                                                                                      
        "forbidden_filename_basenames": [                                                                                                                                                          
            "con",                                                                                                                                                                                 
            "prn",                                                                                                                                                                                 
            "aux",                                                                                                                                                                                 
            "nul",
            "com0",
            "com1",
            "com2",
            "com3",
            "com4",
            "com5",
            "com6",
            "com7",
            "com8",
            "com9",
            "com\u00b9",
            "com\u00b2",
            "com\u00b3",
            "lpt0",
            "lpt1",
            "lpt2",
            "lpt3",
            "lpt4",
            "lpt5",
            "lpt6",
            "lpt7",
            "lpt8",
            "lpt9",
            "lpt\u00b9",
            "lpt\u00b2",
            "lpt\u00b3"
        ],
        "forbidden_filename_characters": [
            "<",
            ">",
            ":",
            "\"",
            "|",
            "?",
            "*",
            "\\",
            "\/"
        ],
        "forbidden_filename_extensions": [
            " ",
            ".",
            ".filepart",
            ".part"
        ],
        "defaultapp": "files",
        "theme": "",
        "loglevel": 2,
        "user_oidc": {
            "login_label": "{name}"
        },
        "trusted_proxies": "***REMOVED SENSITIVE VALUE***",
        "app_install_overwrite": [
            "cadviewer"
        ],
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpmode": "smtp",
        "mail_sendmailmode": "smtp",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpauth": true,
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "465",
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpsecure": "ssl",
        "updater.secret": "***REMOVED SENSITIVE VALUE***"
    }
}

Instance B:

{                                                                                                                                                                                                  
    "system": {                                                                                                                                                                                    
        "htaccess.RewriteBase": "\/",                                                                                                                                                              
        "memcache.local": "\\OC\\Memcache\\APCu",                                                                                                                                                  
        "apps_paths": [                                                                                                                                                                            
            {                                                                                                                                                                                      
                "path": "\/var\/www\/html\/apps",                                                                                                                                                  
                "url": "\/apps",                                                                                                                                                                   
                "writable": false                                                                                                                                                                  
            },                                                                                                                                                                                     
            {                                                                                                                                                                                      
                "path": "\/var\/www\/html\/custom_apps",                                                                                                                                           
                "url": "\/custom_apps",                                                                                                                                                            
                "writable": true                                                                                                                                                                   
            }                                                                                                                                                                                      
        ],                                                                                                                                                                                         
        "memcache.distributed": "\\OC\\Memcache\\Redis",                                                                                                                                           
        "memcache.locking": "\\OC\\Memcache\\Redis",                                                                                                                                               
        "redis": {                                                                                                                                                                                 
            "host": "***REMOVED SENSITIVE VALUE***",                                                                                                                                               
            "password": "***REMOVED SENSITIVE VALUE***",                                                                                                                                           
            "port": 6379                                                                                                                                                                           
        },                                                                                                                                                                                         
        "overwriteprotocol": "https",                                                                                                                                                              
        "overwrite.cli.url": "https:\/\/<domain name>\/nc",                                                                                                                                    
        "overwritewebroot": "\/nc",
        "trusted_proxies": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpmode": "smtp",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "587",
        "mail_smtpauth": true,
        "mail_smtpauthtype": "LOGIN",
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "upgrade.disable-web": true,
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "localhost",
            "<container name>",
            "<domain name>"
        ],                                                                                                                                                                                         
        "datadirectory": "***REMOVED SENSITIVE VALUE***",                                                                                                                                          
        "dbtype": "pgsql",                                                                                                                                                                         
        "version": "32.0.6.1",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbtableprefix": "oc_",
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "maintenance_window_start": 23,
        "default_phone_region": "RU",
        "onlyoffice": {
            "editors_check_interval": 0
        },
        "enabledPreviewProviders": [
            "OC\\Preview\\TXT",
            "OC\\Preview\\MarkDown",
            "OC\\Preview\\Imaginary"
        ],
        "preview_imaginary_url": "***REMOVED SENSITIVE VALUE***",
        "user_oidc": {
            "login_label": "\u0412\u043e\u0439\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e SSO"
        },
        "maintenance": false,
        "mail_sendmailmode": "smtp",
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpsecure": "tls",
        "config_preset": 8,
        "forbidden_filename_basenames": [
            "con",
            "prn",
            "aux",
            "nul",
            "com0",
            "com1",
            "com2",
            "com3",
            "com4",
            "com5",
            "com6",
            "com7",
            "com8",
            "com9",
            "com\u00b9",
            "com\u00b2",
            "com\u00b3",
            "lpt0",
            "lpt1",
            "lpt2",
            "lpt3",
            "lpt4",
            "lpt5",
            "lpt6",
            "lpt7",
            "lpt8",
            "lpt9",
            "lpt\u00b9",
            "lpt\u00b2",
            "lpt\u00b3"
        ],
        "forbidden_filename_characters": [
            "<",
            ">",
            ":",
            "\"",
            "|",
            "?",
            "*",
            "\\",
            "\/"
        ],
        "forbidden_filename_extensions": [
            " ",
            ".",
            ".filepart",
            ".part"
        ],
        "loglevel": 2
    }
}

Apps

Instance A:

Enabled:                                                                                                                                                                                           
  - activity: 5.0.0                                                                                                                                                                                
  - bruteforcesettings: 5.0.0                                                                                                                                                                      
  - calendar: 6.2.0                                                                                                                                                                                
  - circles: 32.0.0                                                                                                                                                                                
  - cloud_federation_api: 1.16.0                                                                                                                                                                   
  - comments: 1.22.0                                                                                                                                                                               
  - contacts: 8.3.2                                                                                                                                                                                
  - contactsinteraction: 1.13.1                                                                                                                                                                    
  - dav: 1.34.2                                                                                                                                                                                    
  - deck: 1.16.3                                                                                                                                                                                   
  - external: 7.0.0                                                                                                                                                                                
  - federatedfilesharing: 1.22.0                                                                                                                                                                   
  - federation: 1.22.0                                                                                                                                                                             
  - files: 2.4.0                                                                                                                                                                                   
  - files_downloadlimit: 5.0.0-dev.0                                                                                                                                                               
  - files_external: 1.24.1                                                                                                                                                                         
  - files_reminders: 1.5.0                                                                                                                                                                         
  - files_sharing: 1.24.1                                                                                                                                                                          
  - files_trashbin: 1.22.0                                                                                                                                                                         
  - files_versions: 1.25.0                                                                                                                                                                         
  - forms: 5.2.4                                                                                                                                                                                   
  - groupfolders: 20.1.10                                                                                                                                                                          
  - imageconverter: 2.1.0                                                                                                                                                                          
  - logreader: 5.0.0
  - lookup_server_connector: 1.20.0
  - nextcloud_announcements: 4.0.0
  - notifications: 5.0.0
  - notify_push: 1.3.0
  - oauth2: 1.20.0
  - onlyoffice: 9.12.0
  - password_policy: 4.0.0
  - passwords: 2025.12.21
  - photos: 5.0.0
  - privacy: 4.0.0
  - profile: 1.1.0
  - provisioning_api: 1.22.0
  - recommendations: 5.0.0
  - related_resources: 3.0.0
  - serverinfo: 4.0.0
  - settings: 1.15.1
  - sharebymail: 1.22.0
  - side_menu: 5.1.3
  - spreed: 22.0.9
  - support: 4.0.0
  - survey_client: 4.0.0
  - systemtags: 1.22.0
  - tables: 1.0.4
  - talk_matterbridge: 1.33.1026000
  - tasks: 0.17.1
  - text: 6.0.1
  - theming: 2.7.0
  - twofactor_backupcodes: 1.21.0
  - updatenotification: 1.22.0
  - user_oidc: 8.3.0
  - user_status: 1.12.0
  - viewer: 5.0.0
  - weather_status: 1.12.0
  - webhook_listeners: 1.3.0
  - workflowengine: 2.14.0
Disabled:
  - admin_audit: 1.22.0
  - app_api: 32.0.0 (installed 32.0.0)
  - dashboard: 7.12.0 (installed 7.11.0)
  - encryption: 2.20.0
  - files_pdfviewer: 5.0.0 (installed 5.0.0-dev.0)
  - firstrunwizard: 5.0.0 (installed 4.0.0)
  - mail_roundcube: 1.2.2 (installed 1.2.2)
  - suspicious_login: 10.0.0
  - twofactor_nextcloud_notification: 6.0.0
  - twofactor_totp: 14.0.0
  - user_ldap: 1.23.0

Instance B:

Enabled:                                                                                                                                                                                           
  - activity: 5.0.0                                                                                                                                                                                
  - analytics: 6.0.2                                                                                                                                                                               
  - bruteforcesettings: 5.0.0                                                                                                                                                                      
  - calendar: 6.2.0                                                                                                                                                                                
  - circles: 32.0.0                                                                                                                                                                                
  - cloud_federation_api: 1.16.0                                                                                                                                                                   
  - comments: 1.22.0                                                                                                                                                                               
  - contacts: 8.3.2                                                                                                                                                                                
  - contactsinteraction: 1.13.1                                                                                                                                                                    
  - dav: 1.34.2                                                                                                                                                                                    
  - deck: 1.16.3                                                                                                                                                                                   
  - external: 7.0.0                                                                                                                                                                                
  - federatedfilesharing: 1.22.0                                                                                                                                                                   
  - federation: 1.22.0                                                                                                                                                                             
  - files: 2.4.0                                                                                                                                                                                   
  - files_antivirus: 6.1.0                                                                                                                                                                         
  - files_downloadlimit: 5.0.0-dev.0                                                                                                                                                               
  - files_fulltextsearch: 32.0.2                                                                                                                                                                   
  - files_reminders: 1.5.0                                                                                                                                                                         
  - files_sharing: 1.24.1                                                                                                                                                                          
  - files_trashbin: 1.22.0                                                                                                                                                                         
  - files_versions: 1.25.0                                                                                                                                                                         
  - forms: 5.2.4                                                                                                                                                                                   
  - fulltextsearch: 32.0.0                                                                                                                                                                         
  - fulltextsearch_elasticsearch: 32.0.2                                                                                                                                                           
  - groupfolders: 20.1.10                                                                                                                                                                          
  - guests: 4.6.0
  - logreader: 5.0.0
  - lookup_server_connector: 1.20.0
  - nextcloud_announcements: 4.0.0
  - notifications: 5.0.0
  - notify_push: 1.3.0
  - oauth2: 1.20.0
  - onlyoffice: 9.12.0
  - password_policy: 4.0.0
  - photos: 5.0.0
  - previewgenerator: 5.12.1
  - privacy: 4.0.0
  - profile: 1.1.0
  - provisioning_api: 1.22.0
  - recommendations: 5.0.0
  - related_resources: 3.0.0
  - serverinfo: 4.0.0
  - settings: 1.15.1
  - sharebymail: 1.22.0
  - side_menu: 5.1.3
  - spreed: 22.0.9
  - support: 4.0.0
  - systemtags: 1.22.0
  - tables: 1.0.4
  - text: 6.0.1
  - theming: 2.7.0
  - twofactor_backupcodes: 1.21.0
  - updatenotification: 1.22.0
  - user_oidc: 8.3.0
  - user_status: 1.12.0
  - viewer: 5.0.0
  - webhook_listeners: 1.3.0
  - whiteboard: 1.5.6
  - workflowengine: 2.14.0
Disabled:
  - admin_audit: 1.22.0
  - app_api: 32.0.0 (installed 32.0.0)
  - dashboard: 7.12.0 (installed 7.12.0)
  - encryption: 2.20.0
  - files_external: 1.24.1
  - files_pdfviewer: 5.0.0 (installed 5.0.0-dev.0)
  - firstrunwizard: 5.0.0 (installed 5.0.0-dev.0)
  - survey_client: 4.0.0 (installed 4.0.0-dev.0)
  - suspicious_login: 10.0.0
  - twofactor_nextcloud_notification: 6.0.0
  - twofactor_totp: 14.0.0
  - user_ldap: 1.23.0
  - weather_status: 1.12.0 (installed 1.12.0)