Before reporting an issue

• I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

Area

oidc

Describe the bug

When configuring the OIDC Username Template Import with e.g. ${CLAIM.foo}, LOCAL, mode force, if the claim is not provided by the identity provider, the username is cleared and the user cannot be edited or deleted any more.

Version

26.2.4

Regression

• The issue is a regression

Expected behavior

Empty username should not be accepted for login with the identity provider.

Actual behavior

Username ends up being blank/empty.

How to Reproduce?

On OIDC identity provider, define a "Username Template Importer" mapper with a template that ends up being empty, e.g. a non-existant claim, mode Force, type LOCAL.

Anything else?

No response