Disable account matching for new users when using OpenID auth module

35 views
Skip to first unread message

Caleb Grant

unread,
Jun 24, 2026, 8:11:24 AMJun 24
to xnat_discussion
HI all,

First post!

I have an issue that might already be solved, but I don't know about it. We're using the OpenID-Auth-Plugin 1.5.0 with XNAT 1.10.0. I've implemented a user enrollment workflow external to XNAT that creates accounts matching the auto-generated OpenID username using the [providerId]-[id] pattern, where [id] is the objectID in each of our EntraID user tenants.

However, if a user comes along who hasn't been pre-provisioned through this workflow, they get the option to create a new account or match it to an existing account. 

The openid.properties config file for each Idp has the following set:

auto.enabled=false
auto.verified=false
openid.provider.forceUserCreate=false
openid.provider.userAutoEnabled=false
openid.provider.userAutoVerified=false

Is there any way to disable this feature? 

Thanks!

Moore, Charlie

unread,
Jun 29, 2026, 10:26:55 AMJun 29
to xnat_di...@googlegroups.com
Hi there,

https://wiki.xnat.org/documentation/configuring-authentication-providers#ConfiguringAuthenticationProviders-Settings - do the settings to hide the user registration option (and optionally you could disable project access requests) accomplish what you're looking for?

Thanks,
Charlie Moore

From: 'Caleb Grant' via xnat_discussion <xnat_di...@googlegroups.com>
Sent: Wednesday, June 24, 2026 4:18 AM
To: xnat_discussion <xnat_di...@googlegroups.com>
Subject: [XNAT Discussion] Disable account matching for new users when using OpenID auth module
 
--
You received this message because you are subscribed to the Google Groups "xnat_discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to xnat_discussi...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/xnat_discussion/e0ca51c1-0f52-4bb6-a006-2e96e25f1d6cn%40googlegroups.com.

 


The materials in this message are private and may contain Protected Healthcare Information or other information of a sensitive nature. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return mail.

Reply all
Reply to author
Forward
0 new messages