We changed the uid of an LDAP user to bring it into line with our policy on user ids. This has broken the federation because of the id change. I'm not sure how to work round this but can we at least have some form of notification outside of the application logs? Message in logs: 10/26/2015 4:20:30 PM[0m [31m16:20:30,439 ERROR [org.keycloak.federation.ldap.LDAPFederationProviderFactory] (default task-45) Failed during import user from LDAP: org.keycloak.models.ModelDuplicateException: Can't import user 'will.cross' from LDAP because email &#39;will(a)pibenchmark.com <mailto:will@pibenchmark.com>' already exists in Keycloak. Existing user with this email is 'will_cross' *Kevin Thorpe * CTO www.p-i.net <http://www.p-i.net/> | @PI_150 <https://twitter.com/@PI_150> _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user