Repository navigation
How to link again the unlink users in Keycloak User Federation? #10490
|
Hi, I link my LDAP users to Keycloak in I check in Keycloak docs that when user login in User Federation LDAP way then Keycloak will validate password directly to LDAP server. So, when I unlink users then the connection to validate password disabled. My question is there Keycloak provide a way to link again the unlink users in Keycloak User Federation? Also, why there's no confirmation like modal or alert that says "If you unlink users then you cannot link again the unlink users and your user cannot login because Keycloak cannot validate password to your LDAP server. Are you sure?". I also see the same issue that mentioned in StackOverflow: https://stackoverflow.com/questions/54615957/keycloak-gives-username-or-password-is-wrong-error-after-pressed-unlink-users. |
Replies: 2 comments 2 replies
|
If its an option (u have no other state on it) the 8000 deletion of the user will fix your issue |
|
Yeah, I think that’s the last option that I have. But, imagine if I use Keycloak more than years, have more than 100k users from LDAP that already sync it with Keycloak in the same config above, the users also mapped with Keycloak Client and Roles with users id from Keycloak not LDAP. Then, suddenly accidentally press “unlink users” which make users cannot login because Keycloak validate password from LDAP server. It makes me to remove the users and sync again and mapped client and roles from scratch because users id from Keycloak is different from the previous. It would be better if Keycloak provides:
|
|
Hi @satyakresna
Hope this help |
|
Thanks @edmaputra. I also use this method too. Here's what I do. Find Federation ID from COMPONENT table based on REALM_ID with query: |
Hi @satyakresna
I have a similar case with you and found the way to restore the unlink user to be the linked one again. I do it manually via the database
Hope this help