When testing AD federation keycloak got into a super broken state. Even after deleting the ldap federation and removing LDAP users, local users were no longer able to be added to groups.
Test with a fresh deploy of keycloak and keycloak clustering disabled to rule out Keycloak HA somehow messing things up. Also test with the default browser authentication flow instead of the uds authentication flow to rule our our custom auth flow causing the issue
When testing AD federation keycloak got into a super broken state. Even after deleting the ldap federation and removing LDAP users, local users were no longer able to be added to groups.
Test with a fresh deploy of keycloak and keycloak clustering disabled to rule out Keycloak HA somehow messing things up. Also test with the default browser authentication flow instead of the uds authentication flow to rule our our custom auth flow causing the issue