Linking existing Persona ?

[luckylinux]

Excellent Integration 👍.

I wonder if there is a Way (or Plan ?) to also link existing Persona to the OIDC Login 🤔.

The first Time I tried to do the login I didn't have anything set for automatic_user_linking (which defaults to false). Therefore I got a new User and a new Persona created.

I understood the Issue, logged in as the Local Administrator, deleted the new OIDC Persona & new OIDC User, then I set in configuration.yaml:

• automatic_user_linking: false
• automatic_person_creation: false

Rebooted Home Assistant and in this Way, I don't get a duplicated User neither a duplicated Persona, when i logged in through SSO / OpenID (Authentik).

I wonder however if you could set it up in a Way that, similarly to automatic_user_linking: true (only set temporarily, then set back to automatic_user_linking: false after the initial Login), there could be a new Configuration Parameter such as automatic_persona_linking.

The same Caveats for Security Reasons, i.e. only set automatic_persona_linking: true temporarily during initial User Creation.

Or maybe add the OIDC "Login" / "Profile" under the Select the devices that belong to this person Section of the Persona, so you can use the OIDC as a Presence Detector basically ? Might be overkill for what I need though.

Thank you for your Help 👍.

[christiaangoossens]

I don't quite understand your question: what exactly would automatic person linking do? And what would it link on? What's your use case?

Automatic user linking is meant for onboarding, as you can link with an existing username. If that user is already linked to a Person entity, that remains, so you get Person > User > 2 sets of credentials (instead of 1). Credentials aren't linked to a person directly.

Additionally, I believe you can make Person entities in the UI, so you can always manually link or unlink a user.

[luckylinux]

Right now I would get 2 x Persona with the same Name (same problem as for User if automatic_user_linking: false) if automatic_person_creation: true (the Default Setting).

That's the Issue at Hand.

Or do you mean that now that I onboarded my User with automatic_user_linking: true (temporary Setting), then the Issue wouldn't show up ?

To be clear I did NOT try with:

• automatic_user_linking: true
• automatic_person_creation: true (Default)

It could be that it doesn't duplicate the Persona if the User is linked, I didn't really want to try to go through the whole Process of creating + deleting + re-configuring + restarting + ...

[christiaangoossens]

Or do you mean that now that I onboarded my User with automatic_user_linking: true (temporary Setting), then the Issue wouldn't show up ?

Yes. automatic_person_creation does not have any effect (either true or false) when automatic_user_linking is on. If you have user linking off and person creation on, I would expect it to create both a new User and Person entity (linked to eachother).

To me this seems like it's working as intended. The automatic_person_creation setting means that IF a user is created (which it isn't when linking), THEN we also create a Person entity for that new user.