Nicola Scendoni created OAK-11984:
-------------------------------------

             Summary: Support UserId Change for External Users
                 Key: OAK-11984
                 URL: https://issues.apache.org/jira/browse/OAK-11984
             Project: Jackrabbit Oak
          Issue Type: Improvement
          Components: auth-external
            Reporter: Nicola Scendoni


In a typical setup with external users, Oak stores the *UserId* as both the 
{{principalName}} and the {{authorizableId}} of the user. The internal 
identifier of the user in the external Identity Provider (IdP) is stored in the 
property {{rep:externalId}}, containing the IdP name as a suffix.

When a user changes his UserId in the external IdP, Oak currently attempts to 
create a new user entry. However, this operation fails because another user 
already exists with the same {{rep:externalId}} value.

The proposed patch addresses this issue by reusing the existing user entry in 
the repository if a user with the same rep:externalId is found. This ensures 
that changes to the UserId in the external IdP are properly reflected in Oak 
without causing duplication or conflicts.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to