User locked out if the Keycloak realm changed #1349

New issue

Open

opened 2026-02-20 18:07:54 -05:00 by deekerman · 0 comments

deekerman commented

2026-02-20 18:07:54 -05:00

Owner

Originally created by @patrickdung on GitHub (Apr 11, 2020).

Originally assigned to: @NGPixel on GitHub.

Describe the bug
Suppose the Keycloak is configured in Wikijs with realm called master. The setting is openid-connect.
This is a mis-configuration. Now we the Keycloak create a new realm for this and called the realm 'external'.

Currently in Wikijs. it does not allow users to be removed if they have created content. So I can't delete the user and relink it with the new realm.

The Keycloak connection setting in Wikijs is updated to the new realm. But the existing users could not login. It is because the uid/providerId of the users are different in the master and the external realm.
Host Info (please complete the following information):*
Wiki.js 2.2.51
Keycloak 9.0.2

Additional context
As a workaround, I update the providerId of the user in the database of Wiki.js. Now the user can login to the new realm.

Please provide a suitable way for this problem, like:
Allow relinking user to a new relam with different providerId or
Allow manually edit providerId in the admin web console or
Allow multiple users with same email address but different providerId to exist in the Wiki.js system or
any other suitable ways

Originally created by @patrickdung on GitHub (Apr 11, 2020). Originally assigned to: @NGPixel on GitHub. **Describe the bug** Suppose the Keycloak is configured in Wikijs with realm called master. The setting is openid-connect. This is a mis-configuration. Now we the Keycloak create a new realm for this and called the realm 'external'. Currently in Wikijs. it does not allow users to be removed if they have created content. So I can't delete the user and relink it with the new realm. The Keycloak connection setting in Wikijs is updated to the new realm. But the existing users could not login. It is because the uid/providerId of the users are different in the master and the external realm. *Host Info (please complete the following information):** Wiki.js 2.2.51 Keycloak 9.0.2 **Additional context** As a workaround, I update the providerId of the user in the database of Wiki.js. Now the user can login to the new realm. Please provide a suitable way for this problem, like: Allow relinking user to a new relam with different providerId or Allow manually edit providerId in the admin web console or Allow multiple users with same email address but different providerId to exist in the Wiki.js system or any other suitable ways