[keycloak-dev] Should we remove links from users when identityProvider is removed?

Marek Posolda mposolda at redhat.com
Mon Mar 21 12:45:32 EDT 2016


On 21/03/16 17:38, Marek Posolda wrote:
> Currently when identity (social) provider is removed, the federated
> links on linked users are not removed. It means that we may end with
> user records in DB, which are linked to non-existent identity provider.
>
> On the other hand, the advantage of current behaviour is, that when
> admin user accidentally removes facebook provider and then he decides to
> add it back (or just use another clientId/clientSecret or change
> configuration) the facebook links of users are still alive.
Sorry to not be clear in the previous paragraph. I meant that some admin 
may remove facebook provider and then re-create it again with another 
configuration. Of course, I didn't mean that we should remove links when 
some configuration of identity provider is changed.

Marek
>
> So should we remove the links or rather keep as it is and not remove them?
>
> Marek
>
>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev



More information about the keycloak-dev mailing list