This will create a public issue which anybody can view and comment on.
Please provide as much information as possible. At least, this should include a description of your issue and steps to reproduce the problem. If possible please provide a summary of what steps or workarounds you have already tried, and any docs or articles you found (un)helpful.
Problem you have encountered: The user reported an issue where, within their "internal" tenant, logging in with an OpenID Connect (OIDC) provider including Google, would replace the existing sign-in method for the same email address instead of creating a new account, even though The settings selected with "Account linking" is "Create multiple accounts with each identity provider". This behavior differed from their default tenant, where a new account was created under the same conditions. This limits user flexibility and causes authentication conflicts. The issue's priority escalated to P1 due to impact on customer feature releases. A feature request has been filed to allow multiple accounts within internal tenants, even with the same email. No immediate workaround exists using password reset for their users as mitigation for the issue.
What you expected to happen: The users should be able to create multiple accounts with each identity provider.
Steps to reproduce:
Setup authentication and configure multiple identity providers using OIDC.
Create an account with one.
When creating an account with a separate identity provider, using the same information, it will replace the information.
Other information (workarounds you have tried, documentation consulted, etc): NA
Description
Summary
Disabling the account linking is not supported for tenant at this moment. Seehttps://cloud.google.com/identity-platform/docs/multi-tenancy#limitations .
This will create a public issue which anybody can view and comment on.
Please provide as much information as possible. At least, this should include a description of your issue and steps to reproduce the problem. If possible please provide a summary of what steps or workarounds you have already tried, and any docs or articles you found (un)helpful.
Problem you have encountered: The user reported an issue where, within their "internal" tenant, logging in with an OpenID Connect (OIDC) provider including Google, would replace the existing sign-in method for the same email address instead of creating a new account, even though The settings selected with "Account linking" is "Create multiple accounts with each identity provider". This behavior differed from their default tenant, where a new account was created under the same conditions. This limits user flexibility and causes authentication conflicts. The issue's priority escalated to P1 due to impact on customer feature releases. A feature request has been filed to allow multiple accounts within internal tenants, even with the same email. No immediate workaround exists using password reset for their users as mitigation for the issue.
What you expected to happen: The users should be able to create multiple accounts with each identity provider.
Steps to reproduce:
Other information (workarounds you have tried, documentation consulted, etc): NA