WIP: Fix #3855

[cappyzawa]

fix #3855

blocked by concourse/dex#8 or dexidp/dex#1448

[cappyzawa]

@vito dexidp/dex#1448 is merged 🎉

What should I do to merge this change into concourse/dex ?

[cirocosta]

Hi @cappyzawa , thanks for the PR!

cc @pivotal-jwinters

[jwntrs]

I'm actually a little hesitant to make this change (even though dex accepted the PR).

OIDC is a standard, that says the sub is the unique identifier for the user. The reason we made the user_id configurable in the OAuth connector is because there is no standard claim to identify the user.

In addition, what you are actually trying to achieve is a better way to identity the user, when doing set-team, so that you don't have to use some guid, is that correct? You can already do this by specifying the username, which already is configurable.

[cappyzawa]

@pivotal-jwinters Oh... I misunderstood that user name key is only related to the display of UI 🤦

Now, I try to login with CONCOURSE_OIDC_USER_NAME_KEY, then succeed.
Thanks for your useful information 🙇

@cirocosta Thanks!!