Skip to content

Commit

Permalink
Merge pull request #2969 from cloudfoundry/adjust-alias-documentation…
Browse files Browse the repository at this point in the history
…-zone-deletion

Adjust Section about IdZ Deletion in Alias Documentation
  • Loading branch information
adrianhoelzl-sap authored Jul 19, 2024
2 parents 48a9ad6 + efd849d commit d31eca2
Showing 1 changed file with 8 additions and 5 deletions.
13 changes: 8 additions & 5 deletions docs/UAA-Alias-Entities.md
Original file line number Diff line number Diff line change
Expand Up @@ -95,11 +95,14 @@ deleted.

## Deletion of an identity zone

When deleting an identity zone that contains entities with alias, all those identity providers that have an alias to the
deleted zone are also deleted.

> **WARNING:** Please note that the users of this IdP in the alias zone are not deleted.
> They will still have a reference (via `alias_zid` and `alias_id`) to their deleted counterparts in the deleted zone.
When deleting an identity zone, all entities (users, IdPs, clients, etc.) inside it are deleted as well.
Without adjustments, this would lead to dangling references in the aliases of entities inside the deleted zone: the
`aliasId` and `aliasZid` would point to a no longer existing entity.

Therefore, the deletion of an identity zone will be rejected if at least one identity provider with an alias exists
inside the zone.
Checking for identity providers is sufficient since users can only have an alias if their origin IdP has an alias as
well.

## Enablement

Expand Down

0 comments on commit d31eca2

Please sign in to comment.