fix: Hide unlinking SSO when OIDC is enforced

client/src/components/common/AdministrationModal/UsersPane/ActionsStep.jsx

@@ -257,7 +257,7 @@ const ActionsStep = React.memo(({ userId, onClose }) => {
               context: 'title',
             })}
           </Menu.Item>
-          {user.isSsoUser && !isCurrentUser && (
+          {user.isSsoUser && !user.lockedFieldNames.includes('isSsoUser') && !isCurrentUser && (
             <Menu.Item className={styles.menuItem} onClick={handleUnlinkSsoClick}>
               <Icon name="unlink" className={styles.menuItemIcon} />
               {t('action.unlinkSso', {

server/api/helpers/users/present-one.js

@@ -70,6 +70,10 @@ module.exports = {
           }
         }
 
+        if (sails.config.custom.oidcEnforced) {
+          lockedFieldNames.push('isSsoUser');
+        }
+
         Object.assign(data, {
           isDefaultAdmin,
           lockedFieldNames,