„Unlink users“-Option greyed out in ldap federation

[mozdi]

Before reporting an issue

• I have searched existing issues
• I have reproduced the issue with the latest nightly release

Area

ldap

Describe the bug

As described in #24059, the option to „unlink users“ in the ldap-federation is greyed out and users cannot be unlinked from the federated source, even if "Import users" is enabled in the LDAP settings.

Version

keycloak-22.0.1

Expected behavior

Unlink users is not greyed out and it is possible to unlink the users from the federated source to use them locally (after password reset)

Actual behavior

„Unlink users“-Option is

How to Reproduce?

Option to „unlink users“ in the ldap-federation is greyed out and users cannot be unlinked from the federated source, even if "Import users" is enabled in the LDAP settings.

Anything else?

No response

[edewit]

It's disabled if the edit mode of the ldap is "unsynced"

[mozdi]

@edewit,
the "Edit-mode" of the LDAP is "WRITABLE" and "Import users" is "On".

Additionally I´ve upgraded to version keycloak-22.0.5.
Unfortunately, the option to unlink users is still greyed out.

Do you have any other idea what could cause this behavior?

BR Mozdi

[mozdi]

I´ve added a second ldap for testing purposes.
When changing the "Edit-mode" to "UNSYNCED", the option to unlink users is NOT greyed out anymore.
It´s only greyed out, when "Edit-mode" is "WRITABLE" and "READ-ONLY".

Shouldn´t it be the other way round?