[keycloak-user] "Verify email" on custom User Federation failed

[Sachin Rastogi]

Hi all,

We are using custom User Federation for our user store which is a database.
Users successfully able to authenticate against the custom User Federation.
Everything is working fine as expected.

Now, we want to "Verify email" on user's first login and also generate
initial magic link email to user.

After we enabled "Verify email" in the realm.and under Required Actions of
Browser Authentication Flow. We are getting the following exception.

08:51:00,649 WARN  [org.keycloak.services] (default task-36)
KC-SERVICES0013: Failed authentication:
org.keycloak.storage.ReadOnlyException: user is read only for this update
        at
org.keycloak.storage.adapter.AbstractUserAdapter.addRequiredAction(AbstractUserAdapter.java:82)
        at
org.keycloak.authentication.requiredactions.VerifyEmail.evaluateTriggers(VerifyEmail.java:53)
        at
org.keycloak.services.managers.AuthenticationManager.evaluateRequiredActionTriggers(AuthenticationManager.java:1039)
        at
org.keycloak.services.managers.AuthenticationManager.nextRequiredAction(AuthenticationManager.java:812)
        at
org.keycloak.authentication.AuthenticationProcessor.nextRequiredAction(AuthenticationProcessor.java:956)
        at
org.keycloak.authentication.AuthenticationProcessor.authenticationComplete(AuthenticationProcessor.java:944)
        at
org.keycloak.authentication.AuthenticationProcessor.authenticationAction(AuthenticationProcessor.java:821)
        at
org.keycloak.services.resources.LoginActionsService.processFlow(LoginActionsService.java:284)
        at
org.keycloak.services.resources.LoginActionsService.processAuthentication(LoginActionsService.java:255)
        at
org.keycloak.services.resources.LoginActionsService.authenticate(LoginActionsService.java:251)
        at
org.keycloak.services.resources.LoginActionsService.authenticateForm(LoginActionsService.java:311)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

Please advise how can I fix this.

Regards,