idp: Use the UUID attribute for computing the "sub" claim

This avoids that recreating the user with the same name will create the same "sub" claim. Even though it gets a new UUID Fixes: #904
2023-05-16 17:25:55 +02:00
parent c37e8350df
commit 2baf86900d
3 changed files with 12 additions and 1 deletions
@@ -122,7 +122,7 @@ func DefaultConfig() *config.Config {
 			LoginAttribute:       "uid",
 			EmailAttribute:       "mail",
 			NameAttribute:        "displayName",
-			UUIDAttribute:        "uid",
+			UUIDAttribute:        "ownCloudUUID",
 			UUIDAttributeType:    "text",
 			Filter:               "",
 			ObjectClass:          "inetOrgPerson",