Comment 0 for bug 2040299

I have a federated local user in the default domain:

REQ: GET https://identity/v3/users/91665ebad88b497cb90eaf4f856357ec
RESP: 200: OK
{
  "user": {
    "description": "Local federated user",
    "email": "<email address hidden>",
    "id": "91665ebad88b497cb90eaf4f856357ec",
    "name": "federated-user",
    "domain_id": "default",
    "enabled": true,
    "password_expires_at": null,
    "options": {},
    "federated": [
      {
        "idp_id": "eduid",
        "protocols": [
          {
            "protocol_id": "openid",
            "unique_id": "<email address hidden>"
          }
        ]
      }
    ],
    "links": {
      "self": "https://identity.api.test1.cloud.switch.ch/v3/users/91665ebad88b497cb90eaf4f856357ec"
    }
  }
}

But when I try to get the user by name, it is returned twice:

REQ: GET https://identity.api.test1.cloud.switch.ch/v3/users?<email address hidden>
RESP: 200: OK
{
  "users": [
    {
      "description": "Local federated user",
      "email": "<email address hidden>",
      "id": "91665ebad88b497cb90eaf4f856357ec",
      "name": "federated-user",
      "domain_id": "default",
      "enabled": true,
      "password_expires_at": null,
      "options": {},
      "links": {
        "self": "https://identity.api.test1.cloud.switch.ch/v3/users/91665ebad88b497cb90eaf4f856357ec"
      }
    },
    {
      "description": "Local federated user",
      "email": "<email address hidden>",
      "id": "91665ebad88b497cb90eaf4f856357ec",
      "name": "federated-user",
      "domain_id": "default",
      "enabled": true,
      "password_expires_at": null,
      "options": {},
      "links": {
        "self": "https://identity.api.test1.cloud.switch.ch/v3/users/91665ebad88b497cb90eaf4f856357ec"
      }
    }
  ],
  "links": {
    "next": null,
    "self": "https://identity.api.test1.cloud.switch.ch/v3/users?<email address hidden>",
    "previous": null
  }
}

The same problem with the openstack CLI:

$ openstack user show <email address hidden>
More than one user exists with the name '<email address hidden>'.

Why does this append? And why is the user by name returned twice?