From b76a09e571d17723de92da10fd89cd65a238abd7 Mon Sep 17 00:00:00 2001
From: Vishal Dalwadi <dalwadivishal26@gmail.com>
Date: Tue, 1 Jul 2025 22:14:52 +0530
Subject: [PATCH] fix(go): delete pending user on sync;

---
 pro/auth/sync.go | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/pro/auth/sync.go b/pro/auth/sync.go
index 65e7016a..c0b66aaa 100644
--- a/pro/auth/sync.go
+++ b/pro/auth/sync.go
@@ -150,6 +150,13 @@ func syncUsers(idpUsers []idp.User) error {
 			if err != nil {
 				return err
 			}
+
+			// It's possible that a user can attempt to log in to Netmaker
+			// after the IDP is configured but before the users are synced.
+			// Since the user doesn't exist, a pending user will be
+			// created. Now, since the user is created, the pending user
+			// can be deleted.
+			_ = logic.DeletePendingUser(user.Username)
 		} else if dbUser.AuthType == models.OAuth {
 			if dbUser.AccountDisabled != user.AccountDisabled ||
 				dbUser.DisplayName != user.DisplayName ||