After upgrading to 1.12 I noticed some Keycloak issues: - Administrators are being forced to re-register 2FA. - The XWiki welcome tour pops up again (even with lowercase usernames). - An external 3rd party OIDC client complains about duplicate accounts (we only have lowercase usernames). It seems the ID pattern has changed from "f:$hash:\$username" to a uuid. Could you please explain in `migrations.md` what changed in version 1.12? - 2FA users need to re-register 2FA. - External OIDC clients (Added by: functional.authentication.oidc.client) relaying to user-id's should care about the new IDs.