coder
diff --git a/‎cli/server.go
+1 b/‎cli/server.go
+1
diff --git a/‎coderd/apidoc/docs.go
+3 b/‎coderd/apidoc/docs.go
+3
diff --git a/‎coderd/apidoc/swagger.json
+3 b/‎coderd/apidoc/swagger.json
+3
diff --git a/‎coderd/userauth.go
+10-2 b/‎coderd/userauth.go
+10-2
diff --git a/‎codersdk/deployment.go
+10 b/‎codersdk/deployment.go
+10
diff --git a/‎docs/api/general.md
+1 b/‎docs/api/general.md
+1
diff --git a/‎docs/api/schemas.md
+4 b/‎docs/api/schemas.md
+4
diff --git a/‎docs/cli/server.md
+10 b/‎docs/cli/server.md
+10
diff --git a/‎site/src/api/typesGenerated.ts
+1 b/‎site/src/api/typesGenerated.ts
+1
@@ -179,6 +179,7 @@ func createOIDCConfig(ctx context.Context, vals *codersdk.DeploymentValues) (*co
 		UserRoleMapping:     vals.OIDC.UserRoleMapping.Value,
 		UserRolesDefault:    vals.OIDC.UserRolesDefault.GetSlice(),
 		SignInText:          vals.OIDC.SignInText.String(),
+		SignupsDisabledText: vals.OIDC.SignupsDisabledText.String(),
 		IconURL:             vals.OIDC.IconURL.String(),
 		IgnoreEmailVerified: vals.OIDC.IgnoreEmailVerified.Value(),
 	}, nil
 
@@ -740,6 +740,8 @@ type OIDCConfig struct {
 	SignInText string
 	// IconURL points to the URL of an icon to display on the OIDC login button
 	IconURL string
+	// SignupsDisabledText is the text do display on the static error page.
+	SignupsDisabledText string
 }
 
 func (cfg OIDCConfig) RoleSyncEnabled() bool {
@@ -1313,9 +1315,15 @@ func (api *API) oauthLogin(r *http.Request, params *oauthLoginParams) ([]*http.C
 		}
 
 		if user.ID == uuid.Nil && !params.AllowSignups {
+			signupsDisabledText := api.OIDCConfig.SignupsDisabledText
+			if signupsDisabledText == "" {
+				signupsDisabledText = "Please contact your Coder administrator to request access."
+			}
 			return httpError{
-				code: http.StatusForbidden,
-				msg:  fmt.Sprintf("Signups are not allowed for login type %q", params.LoginType),
+				code:             http.StatusBadRequest,
+				msg:              "Signups are disabled",
+				detail:           signupsDisabledText,
+				renderStaticPage: true,
 			}
 		}
 
 
@@ -303,6 +303,7 @@ type OIDCConfig struct {
 	UserRolesDefault    clibase.StringArray                 `json:"user_roles_default" typescript:",notnull"`
 	SignInText          clibase.String                      `json:"sign_in_text" typescript:",notnull"`
 	IconURL             clibase.URL                         `json:"icon_url" typescript:",notnull"`
+	SignupsDisabledText clibase.String                      `json:"signups_disabled_text" typescript:",notnull"`
 }
 
 type TelemetryConfig struct {
@@ -1266,6 +1267,15 @@ when required by your organization's security policy.`,
 			Group:       &deploymentGroupOIDC,
 			YAML:        "iconURL",
 		},
+		{
+			Name:        "Signups disabled text",
+			Description: "The custom text to show on the error page informing about disabled OIDC signups.",
+			Flag:        "oidc-signups-disabled-text",
+			Env:         "CODER_OIDC_SIGNUPS_DISABLED_TEXT",
+			Value:       &c.OIDC.SignupsDisabledText,
+			Group:       &deploymentGroupOIDC,
+			YAML:        "signupsDisabledText",
+		},
 		// Telemetry settings
 		{
 			Name:        "Telemetry Enable",
Original file line number	Diff line number	Diff line change
`@@ -740,6 +740,8 @@ type OIDCConfig struct {`
`740`	`740`	`SignInText string`
`741`	`741`	`// IconURL points to the URL of an icon to display on the OIDC login button`
`742`	`742`	`IconURL string`
	`743`	`+ // SignupsDisabledText is the text do display on the static error page.`
	`744`	`+ SignupsDisabledText string`
`743`	`745`	`}`
`744`	`746`
`745`	`747`	`func (cfg OIDCConfig) RoleSyncEnabled() bool {`
`@@ -1313,9 +1315,15 @@ func (api API) oauthLogin(r http.Request, params oauthLoginParams) ([]http.C`
`1313`	`1315`	`}`
`1314`	`1316`
`1315`	`1317`	`if user.ID == uuid.Nil && !params.AllowSignups {`
	`1318`	`+ signupsDisabledText := api.OIDCConfig.SignupsDisabledText`
	`1319`	`+ if signupsDisabledText == "" {`
	`1320`	`+ signupsDisabledText = "Please contact your Coder administrator to request access."`
	`1321`	`+ }`
`1316`	`1322`	`return httpError{`
`1317`		`- code: http.StatusForbidden,`
`1318`		`- msg: fmt.Sprintf("Signups are not allowed for login type %q", params.LoginType),`
	`1323`	`+ code: http.StatusBadRequest,`
	`1324`	`+ msg: "Signups are disabled",`
	`1325`	`+ detail: signupsDisabledText,`
	`1326`	`+ renderStaticPage: true,`
`1319`	`1327`	`}`
`1320`	`1328`	`}`
`1321`	`1329`