Keycloak user federation issue with email constraint
I am checking Keycloak user federation with openldap source. It worked fine & synced users but some users are not synced as they have the same email id as already synced users.
I see this constraint in Keycloak postgresql user_entity table:
CONSTRAINT uk_dykn684sl8up1crfei6eckhd7 UNIQUE (realm_id, email_constraint)
But we need only uid (userName in Keycloak) unique. Is there anyway to configure that email can be duplicated?
keycloak
edited Nov 14 '18 at 11:13
RakihthaRR
18511
asked Feb 19 '18 at 8:23
Valsaraj ViswanathanValsaraj Viswanathan
377632
add a comment |
I am checking Keycloak user federation with openldap source. It worked fine & synced users but some users are not synced as they have the same email id as already synced users.
I see this constraint in Keycloak postgresql user_entity table:
CONSTRAINT uk_dykn684sl8up1crfei6eckhd7 UNIQUE (realm_id, email_constraint)
But we need only uid (userName in Keycloak) unique. Is there anyway to configure that email can be duplicated?
keycloak
edited Nov 14 '18 at 11:13
RakihthaRR
18511
asked Feb 19 '18 at 8:23
Valsaraj ViswanathanValsaraj Viswanathan
377632
github.com/keycloak/keycloak/pull/3630
– Xtreme Biker
Feb 19 '18 at 16:20
But this issue still in latest version.
– Valsaraj Viswanathan
Feb 21 '18 at 6:46
add a comment |
I am checking Keycloak user federation with openldap source. It worked fine & synced users but some users are not synced as they have the same email id as already synced users.
I see this constraint in Keycloak postgresql user_entity table:
CONSTRAINT uk_dykn684sl8up1crfei6eckhd7 UNIQUE (realm_id, email_constraint)
But we need only uid (userName in Keycloak) unique. Is there anyway to configure that email can be duplicated?
keycloak
edited Nov 14 '18 at 11:13
RakihthaRR
18511
asked Feb 19 '18 at 8:23
Valsaraj ViswanathanValsaraj Viswanathan
377632
I am checking Keycloak user federation with openldap source. It worked fine & synced users but some users are not synced as they have the same email id as already synced users.
I see this constraint in Keycloak postgresql user_entity table:
CONSTRAINT uk_dykn684sl8up1crfei6eckhd7 UNIQUE (realm_id, email_constraint)
But we need only uid (userName in Keycloak) unique. Is there anyway to configure that email can be duplicated?
keycloak
keycloak
edited Nov 14 '18 at 11:13
RakihthaRR
18511
asked Feb 19 '18 at 8:23
Valsaraj ViswanathanValsaraj Viswanathan
377632
edited Nov 14 '18 at 11:13
RakihthaRR
18511
asked Feb 19 '18 at 8:23
Valsaraj ViswanathanValsaraj Viswanathan
377632
edited Nov 14 '18 at 11:13
RakihthaRR
18511
edited Nov 14 '18 at 11:13
RakihthaRR
18511
edited Nov 14 '18 at 11:13
RakihthaRR
18511
18511
asked Feb 19 '18 at 8:23
Valsaraj ViswanathanValsaraj Viswanathan
377632
asked Feb 19 '18 at 8:23
Valsaraj ViswanathanValsaraj Viswanathan
377632
asked Feb 19 '18 at 8:23
Valsaraj ViswanathanValsaraj Viswanathan
377632
377632
github.com/keycloak/keycloak/pull/3630
– Xtreme Biker
Feb 19 '18 at 16:20
But this issue still in latest version.
– Valsaraj Viswanathan
Feb 21 '18 at 6:46
add a comment |
github.com/keycloak/keycloak/pull/3630
– Xtreme Biker
Feb 19 '18 at 16:20
But this issue still in latest version.
– Valsaraj Viswanathan
Feb 21 '18 at 6:46
github.com/keycloak/keycloak/pull/3630
– Xtreme Biker
Feb 19 '18 at 16:20
github.com/keycloak/keycloak/pull/3630
– Xtreme Biker
Feb 19 '18 at 16:20
But this issue still in latest version.
– Valsaraj Viswanathan
Feb 21 '18 at 6:46
But this issue still in latest version.
– Valsaraj Viswanathan
Feb 21 '18 at 6:46
add a comment |
1 Answer
1
active
oldest
votes
I noticed that the 'duplicateEmailsAllowed' parameter is not considered if you do a partial import but only if you create the realm. I think it's right this way, being that field a configuration of the realm
answered Nov 12 '18 at 11:58
Luca StancapianoLuca Stancapiano
544
add a comment |
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f48861989%2fkeycloak-user-federation-issue-with-email-constraint%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
I noticed that the 'duplicateEmailsAllowed' parameter is not considered if you do a partial import but only if you create the realm. I think it's right this way, being that field a configuration of the realm
answered Nov 12 '18 at 11:58
Luca StancapianoLuca Stancapiano
544
add a comment |
I noticed that the 'duplicateEmailsAllowed' parameter is not considered if you do a partial import but only if you create the realm. I think it's right this way, being that field a configuration of the realm
answered Nov 12 '18 at 11:58
Luca StancapianoLuca Stancapiano
544
add a comment |
I noticed that the 'duplicateEmailsAllowed' parameter is not considered if you do a partial import but only if you create the realm. I think it's right this way, being that field a configuration of the realm
answered Nov 12 '18 at 11:58
Luca StancapianoLuca Stancapiano
544
I noticed that the 'duplicateEmailsAllowed' parameter is not considered if you do a partial import but only if you create the realm. I think it's right this way, being that field a configuration of the realm
answered Nov 12 '18 at 11:58
Luca StancapianoLuca Stancapiano
544
answered Nov 12 '18 at 11:58
Luca StancapianoLuca Stancapiano
544
answered Nov 12 '18 at 11:58
Luca StancapianoLuca Stancapiano
544
answered Nov 12 '18 at 11:58
Luca StancapianoLuca Stancapiano
544
544
add a comment |
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f48861989%2fkeycloak-user-federation-issue-with-email-constraint%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
github.com/keycloak/keycloak/pull/3630
– Xtreme Biker
Feb 19 '18 at 16:20
But this issue still in latest version.
– Valsaraj Viswanathan
Feb 21 '18 at 6:46