Bug 58426 - add force flag to oidc/saml client creation commands
Summary: add force flag to oidc/saml client creation commands
Status: CLOSED FIXED
Alias: None
Product: UCS
Classification: Unclassified
Component: Keycloak
Version: UCS 5.2
Hardware: Other Linux
: P5 normal
Target Milestone: UCS 5.2-2-errata
Assignee: Marius Meschter
QA Contact: Yannik Schmidt
URL: https://git.knut.univention.de/univen...
Keywords:
Depends on:
Blocks:
 
Reported: 2025-06-26 12:55 CEST by Marius Meschter
Modified: 2025-07-23 15:53 CEST (History)
2 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Customer ID:
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Marius Meschter univentionstaff 2025-06-26 12:55:08 CEST 
Add a --force flag to the saml/sp create and oidc/rp create commands.
If the client already exists, and --force is set, the client is updated instead of silently skipping any update.

Currently, the -univentionkeycloak CLI lacks a way to declaratively apply configuration for SAML/OIDC clients. While univention-keycloak init supports a --force flag to update the realm configuration, the equivalent create commands for clients (oidc/rp create and saml/sp create) do not offer a way to update existing clients.
Comment 1 Marius Meschter univentionstaff 2025-07-16 13:48:46 CEST 
A --force flag has been added to the `oidc/rp` and `saml/sp` commands of univention-keycloak, which will overwrite existing client configuration if set.

univention-keycloak.yaml
e380e843fb69 | feat(keycloak): add force flag to oidc/saml client creation commands

univention-keycloak (3.2.1)
e380e843fb69 | feat(keycloak): add force flag to oidc/saml client creation commands

ucs-test (12.2.27)
ae0450b5a3db | test(keycloak): add tests for univention-keycloak --force flag