How to check: Am I using the Keycloak ID in my app

[zsamji]

We do not endorse using the keycloak id (KC ID)in your app. Using the KC ID makes for a tight binding to the Keycloak product. We discourage this as it will make it more difficult for teams to pivot in the future if another SSO product is used. Instead we recommend binding to the Gov based IDs (GUID/DIDs).

RC Reference: https://chat.developer.gov.bc.ca/channel/sso?msg=XWHYLfTdqGqmovyLD

[zsamji]

Important: you should not be making use of the Keycloak ID in your app. If your team has an important use case, please reach out to us to discuss.

1. Cross reference your application code to see if you have any functions/methods where your users are bound to the ID field highlighted from your custom Keycloak realm. See image below.
2. If you are using a Keycloak ID to identify your users, this will require refactoring of your infrastructure and code base, to use the government supplied identifiers instead.