Bitwarden Self-Host Support Request - Admin Portal Login Loop on OpenShift

[ASCII2741]

Self-host installation scripts issue

• I understand this repository only tracks self-host installation scripts and any other issues should be reported in bitwarden/server

Steps To Reproduce

Issue: Admin Portal magic link authentication fails with persistent login loop on OpenShift deployment using subdomain routing.
Severity: Critical - Unable to access System Administrator Portal
Environment: Red Hat OpenShift 4.x with subdomain-based routing (edge TLS termination)

Expected Result

Email submission for magic link works - emails delivered successfully
Clicking "Login Now" in magic link email redirects back to /login?returnUrl=%2F without authentication
No session cookies set
No error messages visible to user
Second use of same magic link shows: "This login confirmation link is invalid"

Actual Result

Email submission for magic link works - emails delivered successfully
Clicking "Login Now" in magic link email redirects back to /login?returnUrl=%2F without authentication
No session cookies set
No error messages visible to user
Second use of same magic link shows: "This login confirmation link is invalid"

Screenshots or Videos

No response

Additional Context

No response

Build Version

Latest

Environment

Self-Hosted

Environment Details

No response

Issue Tracking Info

• I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

[bitwarden-bot]

Thank you for reporting this issue! We've added this to our internal tracking system.
ID: PM-30292
Link (for internal use): https://bitwarden.atlassian.net/browse/PM-30292

[Neonwarden]

Hi there,

This has been escalated for further investigation. If you have more information that can help us, please add it below.

Thanks!

[ASCII2741]

Admin portal loads successfully
Email submission for magic link works - emails delivered successfully (internal SMTP, no id or pass required.)
Clicking "Login Now" in magic link email redirects back to /login?returnUrl=%2F without authentication.
No session cookies set
No error messages visible to user
Red Hat OpenShift 4.x with subdomain-based routing (edge TLS termination).
Platform: Red Hat OpenShift 4.x
Helm Chart: bitwarden/self-host version 1.1.2
App Version: 2025.12.0
Deployment Method: Helm with custom values.yaml
Users: 200+ planned
Database: Microsoft SQL Server 2022 (in cluster)

haproxy.router.openshift.io/set-forwarded-headers: "append"
haproxy.router.openshift.io/timeout: "5m"