User management in UCS and Keycloak?

Hi,

This topic has unfortunately been bothering me for a long time.

In the past, after installing UCS in a VM, I installed “Nextcloud” alongside the “AD-Compatible DC” app.
Nextcloud was integrated via Docker, and users logged in to the UCS LDAP.
I added the users and groups under “Users,” and they were also available in Nextcloud.

I have now replaced this solution by installing UCS 5.2-2 in a VM and, in addition to the “AD-Compatible DC” app, also “Keycloak 26.1.4-ucs2.”
In another VM, I installed Nextcloud 31.04 on a Debian 12.

I haven’t changed any settings in the Keycloak app settings that deviate from the default.
Keycloak is also accessible via the web.
The ucs realm is available.
I created a client for Nextcloud.

I use the “Social Login” app in Nextcloud.

I can currently log in directly as an administrator to the administration and as a user administrator via keycloak.

My tests have shown that creating a user in keycloak also generates a user, but not vice versa.

My first question is:

Are users created and maintained in the user management system by ucs or in keycloak?

Hello @Thomas_M

Are users created and maintained in the user management system by ucs or in keycloak?

All users are stored in the UCS LDAP, see 7. Architecture — Univention Keycloak app manual 26.2.5 for reference.