LI83029: [CP4I] USER ONBOARDED TWICE TO COMMON SERVICE IF USERNAME IS CASE SENSITIVE (THRU ZEN AND THRU OIDC)

APAR status

• Closed as fixed if next.

Error description

• The common-service has case-sensitive = true
  The problem can express itself in the following 3 scenarios if
  the customer user registry is case sensitive, and the ZEN/IAM is
  perform broker role for customer's user registry
  
  Scenario 1. migration from pre-ZEN to ZEN: (after migration, it
  will inherit the 2nd Scenario)
  Scenario 2. just typical usage of APIc (accept invitation)
  Scenario 3. future: when ZEN is replaced by Keycloak
  

Local fix

• N/A
  

Problem summary

• If using cp4i, when usernames are case-sensitive, in some
  scenarios, two user entries are created for the same user but
  with different case which might lead to end user not having the
  correct roles/permissions on login.
  

Problem conclusion

Temporary fix

Comments

• Issue can be resolved by applying fixes in both APIC and
  Foundations Services.
  APIC fix is available in version 10.0.5.5.
  And Foundational Services fix is available in versions 3.19.14
  and 3.23.6.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels