This message was deleted.

Request looks like this using the go client

updateIdentityBody := oryclient.UpdateIdentityBody{                                                                                             
  Credentials: &oryclient.IdentityWithCredentials{                        
    Oidc: &oryclient.IdentityWithCredentialsOidc{                         
      Config: &oryclient.IdentityWithCredentialsOidcConfig{               
        Providers: []oryclient.IdentityWithCredentialsOidcConfigProvider{ 
          oryclient.IdentityWithCredentialsOidcConfigProvider{            
            Provider: "microsoft",                                        
            Subject:  azureUser.Id,                                            
          },                                                              
        },                                                                
      },                                                                  
    },                                                                    
  },                                                                                                                                          
  SchemaId: orySchemaId,                                                
  State:    oryclient.IDENTITYSTATE_ACTIVE,                               
  Traits: map[string]interface{}{                                         
    "email": azureUser.Mail,                                                   
    "name": map[string]string{                                            
      "first": azureUser.GivenName,                                            
      "last":  azureUser.Surname,                                              
    },                                                                    
  },                                                                      
}

I think PUT (update) expects the whole identity to be supplied. Did you try adding the password credential as well? Either way, the 409 looks weird in this case. Do you get any other message from that?

Searching the archives i see multiple posts about 409's on PUT/update. This is exactly the same body as I use in create identity. Also is there any way to remove password credential? I want to force my users to use SSO. From docs it seems like password can’t be deleted:

Delete an identity credential by its type You can only delete second factor (aal2) credentials.

Ah, hm, I don’t think so. Though, from reading your use case, I think it might make sense to allow that. Could you open an issue in ory/network or ory/kratos? 🙂 Thank you.

Ok!