Sso and existing users
I setup linkwarden a few months ago with the standard compose file on an unraid server. It sits behind a reverse proxy (caddy as opnsense plugin). All is working well and my users are quite happy with it.
Recently i started to deploy Authentik as my sso. I authorized user registration by sso (DISABLE_NEW_SSO_USERS=false) After dealing with next_auth errors i finally managed to register new users. But i didn't find a way to map a sso user to an existing account.
I think it would be an interesting enhancement to be able to map an user to a sso account.
As a workaround i guess i could:
- edit the account table by setting the userid field so that it's the same as the id field in the user table
- edit the user table to setup email, email verified so that they are the same as the sso user.
- then delete the former sso user in the user table.
userid field in account table is a foreign key. id field in the user table is the primary key.
But if i do that the resulting user would have the email, email verified and password fields setup. Would it authorize this user to login without sso (in case of sso breakdown)? Also local users don't have an email field in the ui.
Source: linkwarden/linkwarden