Nextcloud & SSO appearing duplicate accounts for the same user, anyway to map/merge them?

ℹ️ Support
1

Hello guys i have nextcloud set up syncing with ldap and also have SSO enabled via keycoak
The keycloak server syncs with the very same ldap server nextcloud syncs.

The problem is that upon importing users nextcloud understands them as two different accounts even though they have the same username/email etc .Everything is identical since they are coming from the same ldap database.

E.G
This user is the same both in nc & keycloack but its understanded as 2 different accounts who has same name,email just the id added from the keycloak.

image
image963×122

How can i marge those accounts , am only asking since rocket.chat does this automatically so it should be possible in here as well but i can’t think how.

2

In the users account, go to settings > connected accounts and connect the ldap account to the keeclock account.

3

Where is user account located? On keycloac or nc ?
@minecraftchest1

4

You would link the nc account to keycloac. He would be able to sign in with either. Beyond that, I don’t know what you mean.

5

Yea you clearly miss my point i think.

6

Hello! Did you manage to solve this problem?

I have the same problem. Configured ldap authorization using kerberos. User accounts are also duplicated. Please help to solve the problem.

7

Hello
I have exacly the same problem
Did you found a way to link account ?
Thanks

8

Hello
Some news on this subject

In the “Intergation LDAP/AD” menu from the Admin user, if you go in the “Expert” tab, it is possible to change the UUID used to creat the account by something else like “uid”.

In the “Social Login / Custom OpenID Connect” menu, the “” Internal name" will be used to creat the user by adding " Internal name"-“uid”

But I don’t succed to :

  • add a fixed chain befor “uid” in the Expert menu (something like "keycloak-"uid instead of uid)
  • creat a social Login without “Internal name”

any idea to have the same identifier with “Intergation LDAP/AD” and “Social Login” ?

The documentation is not so clear User authentication with LDAP — Nextcloud latest Administration Manual latest documentation

thanks

9

A work around that “works”…
In the ldap creat a custom fields “nextcloudUid”
put inside for each user that have a account in nextcloud “keycloak-uid” with the uid of the current user.
=> and in nextcloud / LDAP / expert menu, add in the UUID fiel “nextcloudUid”

and both keycloak and Ldap login goes to the same account…

it is partialy Sloved because you have for each user to set the new fieldd nextcloudUid …