Fixed
Project:
Keycloak User Sync
Version:
1.0.x-dev
Component:
Code
Priority:
Normal
Category:
Bug report
Assigned:
Reporter:
Created:
12 Oct 2026 at 10:15 UTC
Updated:
12 Oct 2026 at 10:29 UTC
Jump to comment: Most recent
Keycloak 24 and later treat email, firstName and lastName as profile attributes. Once an update request carries an attribute map, every one of them missing from the body is deleted. Since #3624171 every update of an account that has
attributes carries the map, so a first or last name that is not mapped from Drupal is removed by any save of the user. Reproduced on Keycloak 26 with 1.0.12.
Fix: the update carries over email, firstName and lastName from the account (lookup result or the account read already made for the attributes) whenever it does not set them itself. Mapped names still come from Drupal. Unit tests added.
Comments
Comment #3
roromedia commented