Hi Everyone, I have a question regarding the

authenticationId

of a user. As far as I understand, it uniquely identifies and authenticates a user. We have two different environments: Production (Prod) and Staging (Stage). If I have the same user account in both environments and update the Stage environment's users with the

authenticationId

from the Prod environment, will this allow me to impersonate the permissions of the Prod user?

Hi Pradeep, we actually advise against doing this, although GoodData lets you map multiple users to the same

authenticationId

, only the alphabetically first

userId

will be able to log in.

Thank you, @Moises Morales. We are doing this because we need to grant permissions to a few user account. Could you please confirm if my assumption regarding the

authenticationId

is correct? If the same user exists in different environments, does the

authenticationId

remain consistent across environments?

Yes, the authenticationId remains consistent accoss environments, but as stated previously, we do not recommend reusing this value. If you are using our managed OIDC provider, we can provision a couple more users for you depending on your use case (they typically have to be admin users), otherwise, generating a new authenticationId should not be troublesome if you are using your own provider.

thanks @Moises Morales.