Accounts made through OIDC have deactivation issues #2130

New issue

Open

opened 2026-08-13 00:04:52 +00:00 by hackysphere · 3 comments

hackysphere commented

2026-08-13 00:04:52 +00:00

OIDC logins cannot be deactivated through the account management page. Using any password or no password at all gives an invalid password error.
Using the admin console/room to deactivate accounts works, but the same user can no longer create a new account, even if the option to choose a custom localpart is enabled.

I don't know what the best way to handle a deactivated user on a server with no custom localpart selection would be, though.

OIDC logins cannot be deactivated through the account management page. Using any password or no password at all gives an invalid password error. Using the admin console/room to deactivate accounts works, but the same user can no longer create a new account, even if the option to choose a custom localpart is enabled. I don't know what the best way to handle a deactivated user on a server with no custom localpart selection would be, though.

stratself commented

2026-08-16 12:13:39 +00:00

Member

Have you tried !admin oidc unlink?

Have you tried `!admin oidc unlink`?

stratself added the

Support

label

2026-08-16 12:49:59 +00:00

hackysphere commented

2026-08-16 21:04:20 +00:00

Author

Yes, and it works, but the user isn't allowed to deactivate their account and unlink it from OIDC from the account management page by themselves.

It also doesn't work if the user signs up again with the same OIDC username and the server has OIDC username to localpart mapping enabled, but I guess that's probably expected?

Yes, and it works, but the user isn't allowed to deactivate their account and unlink it from OIDC from the account management page by themselves. It also doesn't work if the user signs up again with the same OIDC username and the server has OIDC username to localpart mapping enabled, but I guess that's probably expected?

stratself commented

2026-08-20 01:39:44 +00:00

Member

A user can't unlink themself from their OIDC association. I'm not sure if it should be done upon deactivation. cc @Ginger

Reusing username of deactivated accounts is not supported in Matrix in general, hence automapping fails in this case

A user can't unlink themself from their OIDC association. I'm not sure if it should be done upon deactivation. cc @Ginger Reusing username of deactivated accounts is not supported in Matrix in general, hence automapping fails in this case