Description

when keycloak user is created by saml
it's created in kc as readonly

we want to wrap this with a new flag
in identity provider -> saml settings section
that a new toggle there, disabled by default

when toggle is off/false
the keycloak user created by saml
will be readonly as it is today

when toggle is on/true
the keycloak user created by saml
will be not readonly

Value Proposition

we want to wrap this with a new flag
in identity provider -> saml settings section
that a new toggle there, disabled by default

when toggle is off/false
the keycloak user created by saml
will be readonly as it is today

when toggle is on/true
the keycloak user created by saml
will be not readonly

Goals

• don't readonly user created by saml
• keep existing logic the same by default, don't damage existing logic, by wrapping the readonly with a new toggle flag

Non-Goals

nothing

Discussion

No response

Notes

No response