We are embedding RocketChat into an iframe in our website, using OpenID via Keycloak as the auth mechanism. Due to apparent limitations in the integration we would like to do some extra user management on our server side.
Looking at the REST API for listing users we couldn’t see how to find a user based on their OpenID ID. While we could use the e-mail address for lookup, this is a weak solution as the e-mail address can be changed on the Keycloak side and risks becoming desynced.
Can anyone help here?