Inconsistent social login account linking issues

I’ve run into a strange problem with account linking and social login. It works/doesn’t work depending on the order of the social logins. We’re using Keycloak 19.0.3.

This works: register with GitHub account, register with Gmail (same email address as GitHub account)

After I do this, I can see the user in the Keycloak admin console with both Google and Github as identify providers.

This doesn’t work: register with Google, register with GitHub (same email address).

When I do this, Keycloak takes me through the account linking steps but when it is finished, the user has only Google as an id provider. There were no error messages in the browser or the Keycloak log.

Also, we have “Trust Email” enabled for both providers. In both scenarios, the first registration does not send an email verification email as expected. However, in both scenarios, the second registration triggers email verification.

Has anyone else run into these issues and figured out how to solve them, or should I report a bug?

1 Like