You are right – I found a dummy test account that had the same email address on it. My
And it’s still an open issue to support non-unique email addresses on accounts I see:
From: Marek Posolda <mposolda(a)redhat.com>
Date: Sunday, May 15, 2016 at 11:33 PM
To: Jason Axley <jaxley(a)expedia.com>, "keycloak-user(a)lists.jboss.org"
Subject: Re: [keycloak-user] Two realms; one LDAP; one namespace?
On 13/05/16 16:58, Jason Axley wrote:
Just configured two different realms pointing to the same LDAP directory. Logged into
master via LDAP the first time. The second time, logged into another realm with the same
user and got an error “Email already exists.”
Shouldn’t the realms be independent of one another? It seems like there is a universal
namespace for users that crosses realms. Is that intended? What is the “Keycloak way” to
handle this situation if it’s by design?
yes, realms should be independent on each other. And AFAIK they are. I've just tried
the scenario you described and wasn't able to reproduce with steps you provided. I
have user "john" successfully imported from same LDAP in both
"realm-a" and "realm-b".
The fact that you had "Email already exists" in "realm-b" is maybe not
related to the fact that you previously logged to "realm-a". You can try to see
admin console and list of users in "realm-b" and doublecheck if there is really
not a already existing user with the conflicting email.
keycloak-user mailing list