Which LDAP vendor are you using? I guess that you need to configure correct LDAP UUID Attribute in Keycloak admin console. Unfortunately almost all LDAP vendors have something special here. Marek On 06/09/17 09:20, Kevin VAN DEN ELSHOUT wrote: > Hi, > > I have an ldap user federation configured with sync registrations ON. > > Now when I register a new user, this user is synced to ldap but not saved > into local DB (synced back from ldap). > > [org.keycloak.storage.ldap.LDAPStorageProvider] (default task-21) LDAP User > invalid. ID doesn't match. ID from LDAP [test(a)mailinator.com], LDAP ID from > local DB: [ ] > > Any idea what I am doing wrong? > > CODE_TO_TOKEN_ERROR > Error user_not_found > Details > grant_type authorization_code > code_id 7ac8c3c7-c9d3-413a-bb83-401047925b92 > client_auth_method client-secret > > LOGIN > auth_method openid-connect > auth_type code > redirect_uri ***/sso/login > consent no_consent_required > code_id 7ac8c3c7-c9d3-413a-bb83-401047925b92 > username *** > > REGISTER > auth_method openid-connect > auth_type code > register_method form > redirect_uri ***/sso/login > code_id 7ac8c3c7-c9d3-413a-bb83-401047925b92 > email *** > username *** > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user