Disabling native user login Innovation Release

Before disabling native user login, confirm that at least one other IdP user has the organization owner role. Assign a new organization owner if you haven't done that yet.

Assign a new organization owner

1. Log in at least once to the Hybrid Manager (HM) console as the IdP user that will become the organization owner. This ensures the HM console indexes the new user. Then, log out.
2. Log in as the current native owner of HM (for example, owner@mycompany.com).
3. From the top-right profile menu, select User management. Verify the user that will become the new owner is in the list.
4. Edit the user and assign them the owner role.

Disable native users

1. Retrieve the current secret content:

   → WrapCopy

   kubectl get secret hm-portal-bootstrap -n default -o jsonpath='{.data.static-passwords\.yaml}' | base64 -d > static-passwords.yaml

2. Edit the static-passwords.yaml file and set staticPasswords to an empty list:

   → WrapCopy

   staticPasswords: []

3. Update the secret with the modified content:

   → WrapCopy

   kubectl patch secret hm-portal-bootstrap -n default \
     --type merge \
     -p "{\"data\":{\"static-passwords.yaml\":\"$(base64 < static-passwords.yaml | tr -d '\n')\"}}"

4. The secret is automatically replicated to the upm-dex namespace, and the Dex deployment automatically restarts to apply the changes.

Native user login is now disabled, but the user account still appears in the User management view. Only users authenticated through the configured IdP can access the HM console.