[keycloak-dev] Should we remove links from users when identityProvider is removed?

Stian Thorgersen sthorger at redhat.com
Mon Mar 21 12:46:43 EDT 2016


My vote goes to keep. In the future we should add batch operations for
users and one thing we could support is remove identity provider links.
On 21 Mar 2016 5:39 p.m., "Marek Posolda" <mposolda at redhat.com> wrote:

> Currently when identity (social) provider is removed, the federated
> links on linked users are not removed. It means that we may end with
> user records in DB, which are linked to non-existent identity provider.
>
> On the other hand, the advantage of current behaviour is, that when
> admin user accidentally removes facebook provider and then he decides to
> add it back (or just use another clientId/clientSecret or change
> configuration) the facebook links of users are still alive.
>
> So should we remove the links or rather keep as it is and not remove them?
>
> Marek
>
>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-dev/attachments/20160321/ccfdee71/attachment-0001.html 


More information about the keycloak-dev mailing list