diff --git a/.env b/.env
index 43bde72aa3..c3a40c900b 100644
--- a/.env
+++ b/.env
@@ -32,7 +32,7 @@
 #
 # - "docker-compose.limits.yml"     : defines containers cpu and memory limits for all Phraseanet and gateway containers only.
 #
-# - "docker-compose.altenatives.yml": all alternative services, used only on evoluation or transition periods 
+# - "docker-compose.altenatives.yml": all alternative services, used only on evoluation or transition periods
 #
 # 2/ "COMPOSE_PROFILES" value define which profiles you want to use
 # in docker-compose.
@@ -49,7 +49,7 @@
 #                       choose to launch only some workers, see worker profile list below.
 # - "worker"          : launch one container worker with all jobs run on it.
 # - "cmd"             : launch a container based on worker image, useful for run cmd manualy. 
-# - "db"              : db profile will launch a mariadb container, 
+# - "db"              : db profile will launch a mariadb container,
 #                       because this is the primary datastore, you should use you own SGDD service for production needs.
 # - "elastisearch"    : launch a elasticsearch container.
 # - "rabbitmq"        : launch a rabbitmq container.
@@ -143,7 +143,7 @@ PHRASEANET_DOCKER_REGISTRY=local
 
 # Docker images tag.
 # @run
-PHRASEANET_DOCKER_TAG=4.1.8-rc11
+PHRASEANET_DOCKER_TAG=4.1.8-rc12
 
 # Stack Name
 # An optionnal Name for the stack
diff --git a/config/configuration.sample.yml b/config/configuration.sample.yml
index db9ea7542e..f17f2ad981 100644
--- a/config/configuration.sample.yml
+++ b/config/configuration.sample.yml
@@ -211,24 +211,24 @@ authentication:
             options:
                 client-id: ''
                 client-secret: ''
-        ps_auth_1:
+        openid-1:
             enabled: false
             display: false
-            title: 'PS Auth 1'
-            type: 'ps-auth'
+            title: 'openid 1'
+            type: openid
             options:
                 client-id: ''
                 client-secret: ''
-                base-url: 'https://api-auth.phrasea.local'
-                provider-type: 'oauth'
-                provider-name: 'v2'
+                base-url: 'https://keycloak.phrasea.local'
+                realm-name: phrasea
+                exclusive: false
                 icon-uri: null
+                birth-group: _firstlog
+                everyone-group: _everyone
+                metamodel: _metamodel
+                model-gpfx: _M_
+                model-upfx: _U_
                 debug: false
-                birth-group: '_firstlog'
-                everyone-group: '_everyone'
-                metamodel: '_metamodel'
-                model-gpfx: '_M_'
-                model-upfx: '_U_'
                 auto-logout: false
                 auto-connect-idp-name: null
 registration-fields:
diff --git a/doc/feedback_report.md b/doc/others/feedback_report.md
similarity index 100%
rename from doc/feedback_report.md
rename to doc/others/feedback_report.md
diff --git a/doc/others/openid-sso.md b/doc/others/openid-sso.md
new file mode 100644
index 0000000000..a45651178c
--- /dev/null
+++ b/doc/others/openid-sso.md
@@ -0,0 +1,58 @@
+# openid configuration
+
+#### phraseanet configuration
+To connect with an openid with phraseanet, add the following config in the configuration.yml file
+
+
+```yaml
+authentication:
+    providers:
+        openid-1:
+            enabled: true
+            display: true
+            title: ' openid 1'
+            type: openid
+            options:
+                client-id: 'client-id'
+                client-secret: 'client-secret'
+                base-url: 'https://keycloak.phrasea.local'
+                realm-name: phrasea
+                # if true, can only connect with this provider
+                # the user cannot connect with the default phraseanet login form
+                exclusive: false
+                icon-uri: null
+                birth-group: _firstlog
+                everyone-group: _everyone
+                metamodel: _metamodel
+                # group model prefix
+                model-gpfx: _M_  
+                # user model prefix
+                model-upfx: _U_
+                debug: false
+                # logout with phraseanet and also logout with keycloak
+                auto-logout: true  
+                auto-connect-idp-name: null
+                
+```
+
+
+#### keycloak configuration
+
+- create a new client
+- get clien-id and client-secret
+- in the client setting:
+   
+   set the 'Valid redirect URIs' field with `https://{phraseanet-host}/login/provider/{provider-name}/callback/`
+   eg: https://phraseanet.phrasea.local/login/provider/openid-1/callback/
+     
+   set the 'Valid post logout redirect URIs' field with `https://{phraseanet-host}/login/logout/` eg: https://phraseanet.phrasea.local/login/logout/
+
+- Choose a client > client scopes >  '.... dedicated'
+  
+  add a 'groups' mapper if not exist,  > Add mapper > by configuration  
+  
+  `Mapper type` => Group Membership  
+  `Name` => groups  
+  `Token Claim Name` => groups  
+  `Full group path`  => off   
+  `Add to userinfo`  => on
diff --git a/doc/stamper.md b/doc/others/stamper.md
similarity index 100%
rename from doc/stamper.md
rename to doc/others/stamper.md
diff --git a/lib/Alchemy/Phrasea/Authentication/Provider/Openid.php b/lib/Alchemy/Phrasea/Authentication/Provider/Openid.php
new file mode 100644
index 0000000000..d98afd760b
--- /dev/null
+++ b/lib/Alchemy/Phrasea/Authentication/Provider/Openid.php
@@ -0,0 +1,816 @@
+<?php
+
+/*
+ * This file is part of Phraseanet
+ *
+ * (c) 2005-2022 Alchemy
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Alchemy\Phrasea\Authentication\Provider;
+
+use Alchemy\Phrasea\Authentication\Exception\NotAuthenticatedException;
+use Alchemy\Phrasea\Authentication\Provider\Token\Identity;
+use Alchemy\Phrasea\Authentication\Provider\Token\Token;
+use Alchemy\Phrasea\Exception\InvalidArgumentException;
+use Alchemy\Phrasea\Model\Entities\User;
+use Alchemy\Phrasea\Model\Entities\UsrAuthProvider;
+use Exception;
+use Guzzle\Common\Exception\GuzzleException;
+use Guzzle\Http\Client as Guzzle;
+use Guzzle\Http\ClientInterface;
+use RandomLibtest\Mocks\Random\Generator as RandomGenerator;
+use Symfony\Component\HttpFoundation\RedirectResponse;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Session\SessionInterface;
+use Symfony\Component\Routing\Generator\UrlGenerator;
+use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
+
+
+class Openid extends AbstractProvider
+{
+    /**
+     * @var string|null
+     */
+    private $iconUri;
+
+    /**
+     * @var Guzzle
+     */
+    private $client;
+
+    /**
+     * @var array
+     */
+    private $config;
+
+
+    private function debug($s = '')
+    {
+        static $lastfile = "?";
+        if(array_key_exists('debug', $this->config) && $this->config['debug'] === true) {
+            $bt = debug_backtrace(DEBUG_BACKTRACE_IGNORE_ARGS);
+            if ($bt[0]['file'] != $lastfile) {
+                file_put_contents('/var/alchemy/Phraseanet/logs/openid.log', sprintf("FILE %s \n", ($lastfile = $bt[0]['file'])), FILE_APPEND);
+            }
+            $s = sprintf("LINE (%d) : %s\n", $bt[0]['line'], $s);
+            file_put_contents('/var/alchemy/Phraseanet/logs/openid.log', $s, FILE_APPEND);
+        }
+    }
+
+    public function __construct(UrlGenerator $urlGenerator, SessionInterface $session, array $config, Guzzle $client)
+    {
+        parent::__construct($urlGenerator, $session);
+
+        $this->config = $config;
+        if(!array_key_exists('model-gpfx', $this->config)) {
+            $this->config['model-gpfx'] = '_G_';
+        }
+        if(!array_key_exists('model-upfx', $this->config)) {
+            $this->config['model-upfx'] = '_U_';
+        }
+        if(!array_key_exists('metamodel', $this->config)) {
+            $this->config['metamodel'] = '_metamodel';
+        }
+        if(!array_key_exists('auto-logout', $this->config)) {
+            $this->config['auto-logout'] = false;
+        }
+        if(!array_key_exists('auto-connect-idp-name', $this->config)) {
+            $this->config['auto-connect-idp-name'] = null;
+        }
+
+        $this->client  = $client;
+        $this->iconUri = array_key_exists('icon-uri', $config) ? $config['icon-uri'] : null; // if not set, will fallback on default icon
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public static function create(UrlGenerator $generator, SessionInterface $session, array $options): AbstractProvider
+    {
+        foreach (['client-id', 'client-secret', 'base-url', 'realm-name'] as $parm) {
+            if (!isset($options[$parm]) || (trim($options[$parm]) == '')) {
+                throw new InvalidArgumentException(sprintf('Missing Phraseanet "%s" parameter in conf/authentification/providers', $parm));
+            }
+        }
+
+        $guzzle = new Guzzle();
+        $guzzle->setSslVerification(false, false, 0);
+
+        return new self($generator, $session, $options, $guzzle);
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function getName(): string
+    {
+        return 'openid';
+    }
+
+    /**
+     * @param ClientInterface $client
+     *
+     * @return self
+     */
+    public function setGuzzleClient(ClientInterface $client): self
+    {
+        $this->client = $client;
+
+        return $this;
+    }
+
+    /**
+     * @return ClientInterface
+     */
+    public function getGuzzleClient()
+    {
+        return $this->client;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function authenticate(array $params = array()): RedirectResponse
+    {
+        $this->debug();
+        $this->session->invalidate(0);
+
+        /*
+         * for oauth2 the callback url(s) MUST be fully static. One CAN register multiple possible urls, like
+         * - one for phraseanet home : already static
+         * - one for phraseanet oauth api
+         * - ... ?
+         * api client may want to include static/variable params to be used for final redirect (eg. parade),
+         * we pass those in session
+         * lib/Alchemy/Phrasea/Controller/Api/OAuth2Controller::authorizeCallbackAction(...) will restore params
+         */
+        $this->session->set($this->getId() . ".parms", array_merge(['providerId' => $this->getId()], $params));
+        $this->debug(sprintf("authenticate params saved : session[%s] = %s",
+            $this->getId() . ".parms",
+            var_export($params, true)
+        ));
+
+        $params = ['providerId' => $this->getId()]; // the only required parm (constant)
+        $this->debug(sprintf("redirect_uri params (cleaned) = %s", var_export($params, true)));
+
+        $redirect_uri = $this->generator->generate(
+            'login_authentication_provider_callback',
+            $params,
+            UrlGeneratorInterface::ABSOLUTE_URL
+        );
+        $this->debug(sprintf("redirect_uri = %s", $redirect_uri));
+
+        $state = $this->createState();
+
+        $this->session->set($this->getId() . '.provider.state', $state);
+
+        $parms = [
+            'client_id' => $this->config['client-id'],
+            'state' => $state,
+            'scope' => 'openid',
+            'redirect_uri' => $redirect_uri,
+            'response_type' => "code"
+        ];
+
+        if($this->config['auto-connect-idp-name']) {
+            $url = sprintf("%s/realms/%s/protocol/openid-connect/auth?kc_idp_hint=%s&%s",
+                $this->config['base-url'],
+                urlencode($this->config['realm-name']),
+                urlencode($this->config['auto-connect-idp-name']),
+                http_build_query($parms, '', '&')
+            );
+        } else {
+            $url = sprintf("%s/realms/%s/protocol/openid-connect/auth?%s",
+                $this->config['base-url'],
+                urlencode($this->config['realm-name']),
+                http_build_query($parms, '', '&')
+            );
+        }
+
+
+
+        $this->debug(sprintf("go to url = %s", $url));
+
+        return new RedirectResponse($url);
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function logout()
+    {
+        $this->debug("logout ?");
+        if($this->config['auto-logout']) {
+
+            // too bad: getting the logout page is not enough...
+//        $url = "/logout";
+//        $guzzleRequest = $this->client->get($url);
+//        $response = $guzzleRequest->send();
+//        $this->debug($response->getBody());
+//        return null;
+
+            // ... we really need to redirect to it, which will prevent phr to redirect to his home
+            $url = sprintf("%s/realms/%s/protocol/openid-connect/logout",
+                $this->config['base-url'],
+                urlencode($this->config['realm-name'])
+            );
+
+            return new RedirectResponse($url);
+        }
+
+        return null;
+    }
+
+    public function logoutAndRedirect($redirect_uri)
+    {
+        $this->debug("logoutAndRedirect ?");
+        if($this->config['auto-logout']) {
+            $url = sprintf("%s/realms/%s/protocol/openid-connect/logout?post_logout_redirect_uri=%s&id_token_hint=%s",
+                $this->config['base-url'],
+                urlencode($this->config['realm-name']),
+                urlencode($redirect_uri),
+                $this->session->get($this->getId() . '.provider.id_token')
+            );
+
+            return new RedirectResponse($url);
+        }
+
+        return null;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function onCallback(Request $request)
+    {
+        $this->debug();
+        if (!$this->session->has($this->getId() . '.provider.state')) {
+            throw new NotAuthenticatedException('No state value in session ; CSRF try ?');
+        }
+        $this->debug();
+        if ($request->query->get('state') !== $this->session->remove($this->getId() . '.provider.state')) {
+            throw new NotAuthenticatedException('Invalid state value ; CSRF try ?');
+        }
+        $this->debug();
+        try {
+            $url = sprintf("%s/realms/%s/protocol/openid-connect/token",
+                $this->config['base-url'],
+                urlencode($this->config['realm-name'])
+            );
+
+            $guzzleRequest = $this->client->post($url);
+
+            $guzzleRequest->addPostFields([
+                'grant_type' => "authorization_code",
+                'code' => $request->query->get('code'),
+                'redirect_uri' => $this->generator->generate(
+                    'login_authentication_provider_callback',
+                    ['providerId' => $this->getId()],
+                    UrlGeneratorInterface::ABSOLUTE_URL
+                ),
+                'client_id' => $this->config['client-id'],
+                'client_secret' => $this->config['client-secret'],
+            ]);
+            $guzzleRequest->setHeader('Accept', 'application/json');
+            $this->debug();
+            $response = $guzzleRequest->send();
+            $this->debug();
+        }
+        catch (GuzzleException $e) {
+            $this->debug($e->getMessage());
+            throw new NotAuthenticatedException('Guzzle error while authentication', $e->getCode(), $e);
+        }
+
+        if (200 !== $response->getStatusCode()) {
+            $this->debug();
+            throw new NotAuthenticatedException('Error while getting access_token');
+        }
+
+        $this->debug();
+        $data = @json_decode($response->getBody(true), true);
+        $this->debug();
+
+        if (JSON_ERROR_NONE !== json_last_error()) {
+            $this->debug();
+            throw new NotAuthenticatedException('Error while decoding token response, unable to parse JSON.');
+        }
+
+        $this->debug(var_export($data, true));
+        $this->session->remove($this->getId() . '.provider.state');
+        $this->session->set($this->getId() . '.provider.access_token', $data['access_token']);
+        // id_token_hint used when logout
+        $this->session->set($this->getId() . '.provider.id_token', $data['id_token']);
+
+        try {
+            $this->debug();
+
+            $uri = sprintf("%s/realms/%s/protocol/openid-connect/userinfo",
+                $this->config['base-url'],
+                urlencode($this->config['realm-name'])
+            );
+
+            $request = $this->client->get($uri);
+            $request->setHeader('Authorization', 'Bearer '. $data['access_token']);
+
+            $this->debug();
+
+            $response = $request->send();
+            $this->debug();
+        }
+        catch (GuzzleException $e) {
+            $this->debug($e->getMessage());
+            throw new NotAuthenticatedException('Guzzle error while authentication', $e->getCode(), $e);
+        }
+
+        $this->debug();
+        $data = @json_decode($response->getBody(true), true);
+        $this->debug(var_export($data, true));
+
+        if (200 !== $response->getStatusCode()) {
+            $this->debug();
+            throw new NotAuthenticatedException('Error while retrieving user info, invalid status code.');
+        }
+
+        if (JSON_ERROR_NONE !== json_last_error()) {
+            $this->debug();
+            throw new NotAuthenticatedException('Error while retrieving user info, unable to parse JSON.');
+        }
+
+        $this->debug();
+
+        $userName = $data['preferred_username'];
+
+        if (!\Swift_Validate::email($userName) && isset($data['email'])) {
+            $userName = $data['email'];// login to be an email
+        }
+
+        $userUA = $this->CreateUser([
+            'id'        => $distantUserId = $data['sub'],
+            'login'     => $userName,
+            'firstname' => isset($data['given_name']) ? $data['given_name'] : '',
+            'lastname'  => isset($data['family_name']) ? $data['family_name'] : '' ,
+            'email'     => isset($data['email']) ? $data['email'] : '',
+            '_groups'   => isset($data['groups']) ? $data['groups'] : ''
+        ]);
+
+        $userAuthProviderRepository = $this->getUsrAuthProviderRepository();
+        $userAuthProvider = $userAuthProviderRepository
+            ->findWithProviderAndId($this->getId(), $distantUserId);
+
+        if (!$userAuthProvider) {
+            $manager = $this->getEntityManager();
+
+            $usrAuthProvider = new UsrAuthProvider();
+            $usrAuthProvider->setDistantId($distantUserId);
+            $usrAuthProvider->setProvider($this->getId());
+            $usrAuthProvider->setUser($userUA);
+
+            try {
+                $manager->persist($usrAuthProvider);
+                $manager->flush();
+            }
+            catch (\Exception $e) {
+                // no-op
+                $this->debug();
+            }
+        }
+
+        $this->session->set($this->getId() . ".provider.id", $distantUserId);
+        $this->session->set($this->getId() . ".provider.username", $userName);
+
+        $this->debug(sprintf("session->set('%s', '%s')", $this->getId() . ".provider.id", $distantUserId));
+        $this->debug(sprintf("session->set('%s', '%s')", $this->getId() . ".provider.username", $userName));
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function getToken(): Token
+    {
+        $this->debug();
+        $distantUserId = $this->session->get($this->getId() . '.provider.id');
+        $this->debug(sprintf("session->get('%s') ==> '%s')", $this->getId() . ".provider.id", $distantUserId));
+
+        if ('' === trim($distantUserId)) {
+            $this->debug();
+            throw new NotAuthenticatedException($this->getId() . ' has not authenticated');
+        }
+
+        $this->debug();
+        $token = new Token($this, $distantUserId);
+        $this->debug();
+
+        return $token;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function getIdentity(): Identity
+    {
+        $this->debug();
+        $identity = new Identity();
+
+        try {
+            $uri = sprintf("%s/realms/%s/protocol/openid-connect/userinfo",
+                $this->config['base-url'],
+                urlencode($this->config['realm-name'])
+            );
+
+            $request = $this->client->get($uri);
+            $request->setHeader('Authorization', 'Bearer '. $this->session->get($this->getId() . '.provider.access_token'));
+
+            $response = $request->send();
+        }
+        catch (GuzzleException $e) {
+            $this->debug();
+            throw new NotAuthenticatedException('Error while retrieving user info', $e->getCode(), $e);
+        }
+
+        if (200 !== $response->getStatusCode()) {
+            $this->debug();
+            throw new NotAuthenticatedException('Error while retrieving user info');
+        }
+
+        $data = @json_decode($response->getBody(true), true);
+
+        if (JSON_ERROR_NONE !== json_last_error()) {
+            $this->debug();
+            throw new NotAuthenticatedException('Error while parsing json');
+        }
+
+        $this->debug();
+        $identity->set(Identity::PROPERTY_EMAIL, isset($data['email']) ? $data['email'] : '');
+        $identity->set(Identity::PROPERTY_ID, $data['sub']);
+        $identity->set(Identity::PROPERTY_USERNAME, $data['preferred_username']);
+
+        $this->debug();
+        return $identity;
+    }
+
+    /**
+     * @param array $data
+     * @return User|null
+     * @throws Exception
+     */
+    private function CreateUser(Array $data)
+    {
+        $userManipulator = $this->getUserManipulator();
+        $userRepository = $this->getUserRepository();
+        $ACLProvider = $this->getACLProvider();
+
+        $ret = null;
+
+        $login = trim($data['login']);
+
+        $this->debug(sprintf("login=%s \n", var_export($login, true)));
+
+        if ($login == "") {
+            $this->debug("login is empty, user not created \n");
+        }
+
+        /** @var User $userUA */
+        $userUA = $userRepository->findByLogin($login);
+
+        if (!$userUA) {
+            // need to create the user
+            $this->debug(sprintf("creating user \"%s\" \n", $login));
+            $tmp_email = str_replace(['.', '@'], ['_', '_'], $login) . "@nomail.eu";
+            $userUA = $userManipulator->createUser($login, 'user_tmp_pwd', $tmp_email, false);
+
+
+            if ($userUA) {
+                $this->debug(sprintf("found user \"%s\" with id=%s \n", $login, $userUA->getId()));
+
+                // if the id provider does NOT return groups, the new user will get "birth" privileges
+                if (!is_array($data['_groups']) && array_key_exists('birth-group', $this->config)) {
+                    $data['_groups'] = [$this->config['birth-group']];
+                }
+            }
+            else {
+                $this->debug(sprintf("failed to create user \"%s\" \n", $login));
+            }
+        }
+        else {
+            // the user already exists
+            $this->debug(sprintf("found user \"%s\" with id=%s \n", $login, $userUA->getId()));
+
+            // if the id provider does return groups, then revoke privileges
+            if (is_array($data['_groups'])) {
+                $appbox = $this->getAppbox();
+                $all_base_ids = [];
+                foreach ($appbox->get_databoxes() as $databox) {
+                    foreach ($databox->get_collections() as $collection) {
+                        $all_base_ids[] = $collection->get_base_id();
+                    }
+                }
+
+                $userACL = $ACLProvider->get($userUA);
+                $userACL->revoke_access_from_bases($all_base_ids)->revoke_unused_sbas_rights();
+                $this->debug(sprintf("revoked from=%s \n", var_export($all_base_ids, true)));
+            }
+        }
+
+        // here we should have a user
+
+        if ($userUA) {
+            $this->debug(sprintf("User id=%s \n", $userUA->getId()));
+
+            // apply groups
+            if (is_array($data['_groups'])) {
+
+                $userACL = $ACLProvider->get($userUA);
+
+                $models = [];
+
+                // change groups to models
+                foreach ($data['_groups'] as $grp) {
+                    $models[] = ['name' => $this->config['model-gpfx'] . $grp, 'autocreate' => true];
+                }
+
+                // add "everyone-group"
+                if(array_key_exists('everyone-group', $this->config)) {
+                    $models[] = ['name' => $this->config['model-gpfx'] . $this->config['everyone-group'], 'autocreate' => true];
+                }
+
+                // add a specific model for the user
+                $models[] = ['name' => $this->config['model-upfx'] . $login, 'autocreate' => false];
+
+                $this->debug(sprintf("models=%s \n", var_export($models, true)));
+
+                // if we need those (in case of creation of a model), they will be set only once
+                $metaModelUA = $metaModelBASES = $metaModelOwnerUA = null;
+
+                foreach ($models as $model) {
+
+                    $this->debug(sprintf("searching model '%s' \n", $model['name']));
+
+                    // we check if the model exits
+                    $modelUA = $userRepository->findByLogin($model['name']);
+
+                    if (!$modelUA) {
+                        if ($model['autocreate'] == true) {
+                            $this->debug(sprintf("model '%s' not found \n", $model['name']));
+
+                            // the model does not exist, so create it
+                            //
+                            // if not already known, get the metamodel
+                            if ($metaModelUA === null) {
+
+                                $this->debug(sprintf("searching metamodel '%s'... \n", $this->config['metamodel']));
+
+                                $metaModelUA = $userRepository->findByLogin($this->config['metamodel']);
+
+                                if ($metaModelUA) {
+
+                                    $this->debug(sprintf("metaModelID=%s \n", print_r($metaModelUA->getId(), true)));
+
+                                    // metamodel found, get some infos...
+                                    // ... get acl
+                                    $metaModelACL = $ACLProvider->get($metaModelUA);
+                                    // ... then list of bases
+                                    $metaModelBASES = $metaModelACL->get_granted_base();
+                                    // ... in fact we simply need an array of base_ids, and base_id is the keys of the array, so switch
+                                    $metaModelBASES = array_keys($metaModelBASES);
+
+                                    if ($metaModelUA->isTemplate()) {
+                                        $metaModelOwnerUA = $metaModelUA->getTemplateOwner();
+
+                                        $this->debug(sprintf("metamodel is a model, owner_id=%s \n", print_r($metaModelOwnerUA->getId(), true)));
+                                    }
+
+                                    $this->debug(sprintf("metamodel granted on bases '%s' \n", print_r($metaModelBASES, true)));
+                                }
+                                else {
+                                    $this->debug("metamodel not found \n");
+
+                                    $metaModelUA = false;   // don't search again
+                                }
+                            }
+
+                            // now we can create the model only if we found the metamodel
+                            if ($metaModelUA) {
+
+                                $this->debug(sprintf("creating model '%s'... \n", $model['name']));
+
+                                // create the model user...
+                                $modelUA = $userManipulator->createUser($model['name'], 'model_pwd', null, false);
+
+                                $this->debug(sprintf("model '%s' created with modelID=%s... \n", $model['name'], print_r($modelUA->getId(), true)));
+
+                                if ($metaModelOwnerUA) {
+                                    $modelUA->setTemplateOwner($metaModelOwnerUA);
+
+                                    $this->debug(sprintf("model '%s' set as model, owner_id=%s... \n", $model['name'], print_r($metaModelOwnerUA->getId(), true)));
+                                }
+
+                                // ... then copy acl of every sbas
+                                $modelACL = $ACLProvider->get($modelUA);
+                                $modelACL->apply_model($metaModelUA, $metaModelBASES);
+
+                                $this->debug(sprintf(" ... and granted on bases %s \n", print_r($metaModelBASES, true)));
+                            }
+                        }
+                    }
+                    else {
+                        // the model already exists
+                        $this->debug(sprintf("model '%s' already exists, id=%s \n", $model['name'], print_r($modelUA->getId(), true)));
+                    }
+
+                    // here we should have the model, except "user" models which are not automatically created
+
+                    if ($modelUA) {
+                        $this->debug(sprintf(" ... modelID=%s \n", print_r($modelUA->getId(), true)));
+
+                        // here we have the model so get some infos about it
+                        $modelACL = $ACLProvider->get($modelUA);
+                        $modelBASES = $modelACL->get_granted_base();
+                        // ... in fact we simply need an array of base_ids, and base_id is the keys of the array, so switch
+                        $modelBASES = array_keys($modelBASES);
+
+                        $this->debug(sprintf("model granted on bases '%s' \n", print_r($modelBASES, true)));
+
+                        // ... then copy acl of every sbas
+                        $userACL->apply_model($modelUA, $modelBASES);
+
+                        $this->debug(sprintf("user '%s' granted on bases %s \n", $login, print_r($modelBASES, true)));
+                    }
+                    else {
+                        $this->debug(sprintf("no model '%s' \n", $model['name']));
+                    }
+                }
+
+                $userACL->inject_rights();
+            }
+
+            // now update infos of the user
+            if (!is_null($data['firstname']) && ($v = trim($data['firstname'])) != '') {
+                $userUA->setFirstName($v);
+            }
+            if (!is_null($data['firstname']) && ($v = trim($data['lastname'])) != '') {
+                $userUA->setLastName($v);
+            }
+
+            $mail = "";     // mail is a special case
+            try {
+                if (($v = trim($data['email'])) != '') {
+                    $mail = $v;
+                }
+            }
+            catch (Exception $e) {
+                // no-op
+            }
+
+            if ($mail != $userUA->getEmail()) {
+                try {
+                    $this->debug("unsetting former email of user");
+                    $userManipulator->setEmail($userUA, null);
+                    if ($mail != "") {
+                        $this->debug(sprintf("setting email '%s' to user", $mail));
+                        $dupUserUA = $userRepository->findByEmail($mail);
+                        if ($dupUserUA == null) {
+                            // ok we can set the mail
+                            $userManipulator->setEmail($userUA, $mail);
+                            $this->debug(sprintf("email '%s' set to user", $mail));
+                        }
+                        else {
+                            $this->debug(sprintf("warning : another user (id=%s) already has email '%s', email not set", $dupUserUA->getId(), $mail));
+                        }
+                    }
+                }
+                catch (Exception $e) {
+                    // no-op
+                    $this->debug(var_export($e->getMessage(), true));
+                }
+            }
+            else {
+                $this->debug(sprintf("email '%s' does not change\n", $mail));
+            }
+
+            // yes we are logged !
+
+            if (isset($this->config['exclusive']) && $this->config['exclusive'] == true) {
+                // reset the password
+                // if it is an existing user, the user cannot login from the default phraseanet login
+                // cannot renew her password
+
+                /** @var RandomGenerator $randomGenerator */
+                $randomGenerator = $this->getRandomGenerator();
+                $password = $randomGenerator->generateString(16);
+                $userUA->setPassword($password);
+                $userUA->setCanRenewPassword(false);
+            }
+
+            $this->debug(sprintf("returning user id=%s", $userUA->getId()));
+
+            $ret = $userUA; // ->getId();
+        }
+
+        return $ret;
+    }
+
+
+
+    /**
+     * {@inheritdoc}
+     */
+    public function getIconURI()
+    {
+        return $this->iconUri ?: 'data:image/png;base64,'
+            . 'iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAAAXNSR0IArs4c6QAA'
+            . 'AJZlWElmTU0AKgAAAAgABQESAAMAAAABAAEAAAEaAAUAAAABAAAASgEbAAUAAAAB'
+            . 'AAAAUgExAAIAAAARAAAAWodpAAQAAAABAAAAbAAAAAAAAABIAAAAAQAAAEgAAAAB'
+            . 'QWRvYmUgSW1hZ2VSZWFkeQAAAAOgAQADAAAAAQABAACgAgAEAAAAAQAAADCgAwAE'
+            . 'AAAAAQAAADAAAAAAXukGzAAAAAlwSFlzAAALEwAACxMBAJqcGAAAActpVFh0WE1M'
+            . 'OmNvbS5hZG9iZS54bXAAAAAAADx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6'
+            . 'bWV0YS8iIHg6eG1wdGs9IlhNUCBDb3JlIDUuNC4wIj4KICAgPHJkZjpSREYgeG1s'
+            . 'bnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgt'
+            . 'bnMjIj4KICAgICAgPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIKICAgICAg'
+            . 'ICAgICAgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIgog'
+            . 'ICAgICAgICAgICB4bWxuczp0aWZmPSJodHRwOi8vbnMuYWRvYmUuY29tL3RpZmYv'
+            . 'MS4wLyI+CiAgICAgICAgIDx4bXA6Q3JlYXRvclRvb2w+QWRvYmUgSW1hZ2VSZWFk'
+            . 'eTwveG1wOkNyZWF0b3JUb29sPgogICAgICAgICA8dGlmZjpPcmllbnRhdGlvbj4x'
+            . 'PC90aWZmOk9yaWVudGF0aW9uPgogICAgICA8L3JkZjpEZXNjcmlwdGlvbj4KICAg'
+            . 'PC9yZGY6UkRGPgo8L3g6eG1wbWV0YT4KKS7NPQAADE5JREFUaAXtWQuMVcUZ/uY8'
+            . '7vvui+WNAYHa2oqKiw/SWnaJ0ipqH4ZHmjTVGMFao00LVm2Dl9YXtVETpVYSX6m2'
+            . 'tYhajU210V0KPqi7CALKrggUWeS9uOzufZzH9PvPvXdZ1t27rJCUpM5y7pyZM2fm'
+            . '+/7/m3/ODMAX6QsLHJcF1HG9XeJlraEaFsOUJrW3w1MKukTzk+tR4zzYvRHpeli9'
+            . '605E+YR2Wp+CVbC2o+9DtF1bd6EyodsTiV+qup1p8QpBG/SGdyLAn7A+dAqGgC92'
+            . '2H4vrubVqpcaWi+v0u1/qWjteC7+o+Jz8QbJGMXy8eTHNQfEok3zYU1ZBkdAtN2L'
+            . 'WkNhSVkE52VyQE4rB9XlCCe1HU76SDvu24hgQWx6+g1prxsptRq4xzM/uq0mHQ4m'
+            . 'ic45sAB3Dt2P8crF3VEbs0kA7Wm4nLIG/2yxs+Nq3+30/Xg5LoDlrc6tMv/o2t5t'
+            . 'agp2ypjiEVXHdz5HGrQH6mup8wZGFY67ewHisSrrNm25N5fFYBG4L3h4BdEHZIjh'
+            . 'ZTCiZBPyoGzPM8O+ClV7hpfx00rpO40OLBHwBUmpwc6PY9ZhoHOCr2ugywmy7ebk'
+            . '1eForCUZMm5TviHgxYLSXx58MWiKiVS+oAw+U9pwO+CYpo4aFbjDT2KzXosrCdwX'
+            . '8CIrGYtvHVOS7ksmDq2a5tVQ5015nV87YpoXcu+tLPfOFcyO4Toq7FnKJi9THFBI'
+            . 'gln0NFI84AceMEKFPOzBsHyJSa4RosxCgHcYr5kWFqjJWCc9HOv8KElAp1KGSqUC'
+            . 'VG1zx41zTf+eaNybY1IOncpxKQlDhVyDOZiLRGj/AokCATUq2S2hQEYkYZKAsrrJ'
+            . 'SkjVRpxRLAP4Hh6m+RdxfuwPiGjNsKu6G0tdz9Svq4rg3wSiu6446zdZL95cZlhz'
+            . 'utKm39FleBSBxcuAY0E7ZvdFIRzpX26DS/woF/8FubDrTiI5y++E63vUVxl+rFW8'
+            . 'Jdd4xo3SQsBrneoXZ4/RujuELrD+aO3aKZWrX3mx7MVbR+5PUxFjznJgdNjKygK0'
+            . 'JGVDy8vkpPwLeXfZIEhKSI1OHOWBQEbiAXneOwWVY1wDO2wk+NBYuGlH1Q2zxw4Z'
+            . '+34RU+9X+mS2uK4uqP/9jQtOX521R7Ze9XgmcuF8rbeut732PQwzFYyNR6wuHvhM'
+            . 'ueAJCURi9fzF4QsTujcQqJHwfV8ZLsFH6vw269HM3/wZX1u88tUp0nZxQ0OfWPus'
+            . 'REND0H+6eUv65YUL8MhjK+y1Y85U6rqlCI/+JvytG+HniEyXUTr8SiuQERI9iUCz'
+            . 'jVha/BxcQiRPKBgg+BkCX1cD7iew7CgyQ36Hf2RvMua8q+3vNjbhvcO7u6RZw8qV'
+            . 'R17pcdc3gdraoIkqLzOGTr4A5oZm/eoNP8ELqzag9fzvIzT3bsbDELzWZmivnCEk'
+            . 'XiCSnw9wC/OCYsh3JCR6EAkqE/TkGE7aA7CM/TAqb8Fa+ync1DwCl6zbhFzmE315'
+            . 'PI6kbfeNMd/zQPHWh9vRBb8qqSomfx2fPvES/nnNXXhrZxpdM3+FyPSFUAdb4B3c'
+            . 'zvBRDe2GSMQIPFL0Rn7iitXF9Jw3BqWnBHgHTL0TVvlV2Jb4E+7cWYOaxq1o3P8R'
+            . 'ZnJJt1RYpX0GnwE++wb8lJBgTXGSSBrhSWMRN018suRhtJ9xNk676jKMnf0oQh+8'
+            . 'DmfD01BVxJicSAIHKC9a3OYk5ut56wv4EZRLK2yPXxCJ6Thgz8WLe4bgF9tbEXYP'
+            . '4tJwhN8mUXQGSwRDk7w7QBqQgLwvWCSiaMeF52pEzpkEK5PBfxb8Fu3f+RZOmVmH'
+            . 'IRPPBdY9A6f1LRjDRwgTzgcSURJxyikXmtIl+MRQZBIL8fqB8bi7ZR9Wd6zDxYkw'
+            . '14Y40lrCfWAyGfaYUkl9BStMj24CIiz7/NTUlEL4vDPhrWvBtnkPYPPbu9BxzrUI'
+            . 'X7QYhrsb/r4dbDiMchkOn+WItQ/msFvwjv8g5q2pxMxVa5HrbMXFsRhysoYF4HsM'
+            . 'doy3x+YBdiZOkNQz97uylE0C9sgKpP/wGpoffxtDbrkEo+qeQGRXI5yWh2DTqKFh'
+            . '1+BDcxqe3ODhzub3MDySRV1ZElnKsYvytAyDKpM5kh9jML+lCdAF2hLI0rM+CnxQ'
+            . 'psA1AeiuHIwpwxmZNA4sfhIHp07C6DnTMGr6Q2gbpfD8riSuf+dDTsj9mFpVDicU'
+            . 'x6eeRogh1mT3RaMMBnixbUkJFRvJAMVBjs5ZEl3JTHU8rg0Edf4ERLv2YuNPF+Hl'
+            . 'lgTu2jgS1z/9Ciabh3B2sgxtXOAckj7K2MVOiwMOIi/tgV4d5X1wtCdk7Py0I3iq'
+            . 'OZMJ4f3E6Wg44zyM35eFjnTwa2oiDnQoSqULUUtmFu1W4F7sTfo5ilSvsfsrDkgg'
+            . 'b5ziMEc8EQAQCXFYWzM6cfStoTFYExqJXaEo/M4OxLkGHabOpW0mV4bOQ2Wo1mmU'
+            . 'l3XRaR6r5Tvu88A+QmdAAtI0T6KQsyDzTURgMjRavNtjVaMpPAbvW0lEKakK7eEQ'
+            . '32I4p7EJMhSGHbbY3kRbV4IS8lBV0U6CJCL9ayHy+dKABIrgi93LtknsblMuh1U5'
+            . '1tLq79pVjPUWyn1uhbnt4naFLfKLmBIP2CFuYLhz4TPLkpU4gkOHy+H5WZSV7UfY'
+            . '4qcue8xv5nqPWBy577wkAVGr2F3A5JcYDkO5uASw0RyB9+yh6DAiqCJwiUCOMrne'
+            . '5YVR8BcUtw0IhWBaNmyGS4tlk5cQcbwY2g9XgSdHiMV3wzA4Z7QQCfwSjD7QT0kC'
+            . '8nJgD5rcDERj4GN+L2w2hmK3iqOS0YTRnNtKERLtJzGNN6TBm7y2xTPiAYtX3gN5'
+            . 'AiY9Y/ESMo4zGumuEYhEdpPoTr4rpgt398GbflNJAlxeGPR4oqB91YY4tmEItusk'
+            . 'EqxNqiyxUkjEabIsH2vSWj45fFlVC8t24IGAgM3N2hHQliVE8gQsMjfMMNeUr9AA'
+            . 'p1COW9nHTpbZTYntpLAqSYCvR3IMjs1uzNmCpEGLqXKdpX19ZBUlUbAyTAHP3sTw'
+            . 'dJnPWc7NifRPYDKJ6QHOAd0tISFCAkeREDIMtWY164dzA7bXUZGPTTe7MxJ0NC34'
+            . '/cyPDPnZ1NAQjH5I2f+u74x+sM6NRGzfUSE/62R9VzvUvOdxLvgOL94Hl1fIpezz'
+            . 'YpikCXt6wBYZ2SQe5LyXeUFiIcmDujClplzbtlTFsHMiMVywNxadtFEA1tbenrdI'
+            . 'L7R9EkjRiLyMZ7aub9m4682vluvMz3Ke86lLzbiegHbcAHxAgkSCOgEuJLgiS+5K'
+            . 'nO9BIABbBNqTSKHOCnkk4cUrhlkk5bpdB5fErAnj//69metSPB1J9SOlfiVUJCH5'
+            . 'ptY37p844sKnckjfYZuheaZvWYTNnbySI4+8EeRzopA8TnlXCNADBqUik1gsbHJN'
+            . 'OKJ7kRClxAMiw7K8SDxpyzOd63rWsIxbl3/7lC3SXYoHDP2Bl+d9ekAeSEoRPDPF'
+            . 'vZK9ZfeqfZtb/zXfcbwpWS9Tz7MOHk15BiXk0BtaJNVTSq7j5CVEnUcI3gqkc8QD'
+            . 'VsjWlmU7oWjMSFQOpXCcd7WXu+jZS8fOEvDzHmm02YEqBV4w9usBeVhIugnBqZxR'
+            . 'U1NjNjXVN7F++lnjZszxffOeiG2NE9nwkE1O7oL/2DB9A27GDaKReKBCPCCTOIg6'
+            . 'gRdcy7StaEW17XV17PHSnYtWXH7qMhmvtr7eGrpvn142e4qD+VJTOpX0QK9X/aam'
+            . 'JmcWZjGspIz12199Jhfb8eWcm77d9XI8KOL88Hk25bvctPHIMSsEuCaTQDyQEK1P'
+            . 'qeR1PlR07ut0572VVYkvrbhsLMFrJeAb6urc5bNn59fQXgD6Kg6GQPD+cixn5ym/'
+            . 'trbW2rRpU65p68u/9nx9WtZN/5maN/j9Y9IjdIdLleXnQNQO+ZSQE0lWmNFEuamz'
+            . 'mecYhU9fcfm4mx/7xtDDgVy4pRHwfYEsVTdoAsXOGhoaZDBFWdlNW1/asebDF37g'
+            . 'ec60nJt5h9X8aHYNHz4PIC0nFosZcerc8Jz12vdmPH/FqVc+P3NCS01B58vmUy7/'
+            . '25QyxCNFDDOm/vCaCbh096Kf36d/u+aAnrq8ee/cl7ZdV3w+66/alOhSLJ80eYFE'
+            . 'MZ7G70gtffCBlduXYslmHlHkk+i8eH/S5jU184Jo1BNgIBdqq2fdSX6fMmbNmmWK'
+            . 'XMCV9CQH+wW8/18L/BeSV1YkHS6B9wAAAABJRU5ErkJggg==';
+    }
+
+    public function getAccessToken()
+    {
+        return $this->session->get($this->getId() . '.provider.access_token');
+    }
+
+    public function getUserName()
+    {
+        return $this->session->get($this->getId() . ".provider.username");
+    }
+
+}
diff --git a/lib/Alchemy/Phrasea/Authentication/RecoveryService.php b/lib/Alchemy/Phrasea/Authentication/RecoveryService.php
index 5dea04a657..e4a92dad36 100644
--- a/lib/Alchemy/Phrasea/Authentication/RecoveryService.php
+++ b/lib/Alchemy/Phrasea/Authentication/RecoveryService.php
@@ -122,7 +122,7 @@ class RecoveryService
         $receiver = Receiver::fromUser($user);
         $token = $this->tokenManipulator->createResetPasswordToken($user);
 
-        if ($notifyUser) {
+        if ($notifyUser && $user->canRenewPassword()) {
             $url = $this->urlGenerator->generate('login_renew_password', [ 'token' => $token->getValue() ], true);
 
             $mail = MailRequestPasswordUpdate::create($this->application, $receiver);
diff --git a/lib/Alchemy/Phrasea/Controller/Admin/UserController.php b/lib/Alchemy/Phrasea/Controller/Admin/UserController.php
index 97fa05db04..efaa4457ae 100644
--- a/lib/Alchemy/Phrasea/Controller/Admin/UserController.php
+++ b/lib/Alchemy/Phrasea/Controller/Admin/UserController.php
@@ -191,6 +191,14 @@ class UserController extends Controller
         return $this->app->json(['success' => true]);
     }
 
+    public function changeCanRenewPasswordAction(Request $request)
+    {
+        $helper = $this->getUserManageHelper($request);
+        $helper->setCanRenewPassword();
+
+        return $this->app->json(['success' => true]);
+    }
+
     public function applyRightsAction(Request $request)
     {
         $data = ['error' => true];
diff --git a/lib/Alchemy/Phrasea/Controller/Root/LoginController.php b/lib/Alchemy/Phrasea/Controller/Root/LoginController.php
index 42c84511cf..37e768620d 100644
--- a/lib/Alchemy/Phrasea/Controller/Root/LoginController.php
+++ b/lib/Alchemy/Phrasea/Controller/Root/LoginController.php
@@ -508,9 +508,7 @@ class LoginController extends Controller
         // does the provider provides a logout redirection ?
         if($providerId && ($provider = $this->findProvider($providerId))) {
             if(method_exists($provider, 'logoutAndRedirect')) {
-                $redirectToPhr = $this->app->url('logout', [
-                    'redirect' => $request->query->get("redirect")
-                ]);
+                $redirectToPhr = $this->app->url('logout');
                 $response = $provider->logoutAndRedirect($redirectToPhr);
             }
             else {
diff --git a/lib/Alchemy/Phrasea/ControllerProvider/Admin/Users.php b/lib/Alchemy/Phrasea/ControllerProvider/Admin/Users.php
index a9c4494810..9eb1133d86 100644
--- a/lib/Alchemy/Phrasea/ControllerProvider/Admin/Users.php
+++ b/lib/Alchemy/Phrasea/ControllerProvider/Admin/Users.php
@@ -53,6 +53,7 @@ class Users implements ControllerProviderInterface, ServiceProviderInterface
         $controllers->post('/delete/', 'controller.admin.users:deleteUserAction');
         $controllers->post('/auth-failure/reset/', 'controller.admin.users:resetAuthFailureAction');
         $controllers->post('/mail-locked/change/', 'controller.admin.users:changeMailLockedAction');
+        $controllers->post('/can-renew-password/change/', 'controller.admin.users:changeCanRenewPasswordAction');
         $controllers->post('/rights/apply/', 'controller.admin.users:applyRightsAction')
             ->bind('admin_users_rights_apply');
         $controllers->post('/rights/quotas/', 'controller.admin.users:editQuotasRightsAction');
diff --git a/lib/Alchemy/Phrasea/Core/Version.php b/lib/Alchemy/Phrasea/Core/Version.php
index bb493d5d38..0084834dce 100644
--- a/lib/Alchemy/Phrasea/Core/Version.php
+++ b/lib/Alchemy/Phrasea/Core/Version.php
@@ -17,7 +17,7 @@ class Version
      * @var string
      */
 
-    private $number = '4.1.8-rc11';
+    private $number = '4.1.8-rc12';
 
     /**
      * @var string
diff --git a/lib/Alchemy/Phrasea/Helper/User/Manage.php b/lib/Alchemy/Phrasea/Helper/User/Manage.php
index 913810f236..ad1e6e7bc7 100644
--- a/lib/Alchemy/Phrasea/Helper/User/Manage.php
+++ b/lib/Alchemy/Phrasea/Helper/User/Manage.php
@@ -262,6 +262,17 @@ class Manage extends Helper
         $this->getObjectManager()->flush();
     }
 
+    public function setCanRenewPassword()
+    {
+        /** @var UserRepository $userRepository */
+        $userRepository = $this->app['repo.users'];
+        $user = $userRepository->find($this->request->request->get('user_id'));
+        $status = $this->request->request->get('action') == 'can-renew' ? true : false;
+        $user->setCanRenewPassword($status);
+        $this->getObjectManager()->persist($user);
+        $this->getObjectManager()->flush();
+    }
+
     /**
      * @return ObjectManager
      */
diff --git a/lib/Alchemy/Phrasea/Model/Entities/User.php b/lib/Alchemy/Phrasea/Model/Entities/User.php
index 6db15b781f..57f4b9ab3e 100644
--- a/lib/Alchemy/Phrasea/Model/Entities/User.php
+++ b/lib/Alchemy/Phrasea/Model/Entities/User.php
@@ -276,6 +276,11 @@ class User
      */
     private $lastInactivityEmail;
 
+    /**
+     * @ORM\Column(type="boolean", name="can_renew_password", options={"default" = 1})
+     */
+    private $canRenewPassword = true;
+
     /**
      * Constructor
      */
@@ -740,6 +745,25 @@ class User
         return $this;
     }
 
+    /**
+     * @return bool
+     */
+    public function canRenewPassword()
+    {
+        return $this->canRenewPassword;
+    }
+
+    /**
+     * @param $canRenewPassword
+     * @return $this
+     */
+    public function setCanRenewPassword($canRenewPassword)
+    {
+        $this->canRenewPassword = (Boolean) $canRenewPassword;
+
+        return $this;
+    }
+
     /**
      * @return boolean
      */
diff --git a/lib/Alchemy/Phrasea/PhraseanetService/Controller/PSExposeController.php b/lib/Alchemy/Phrasea/PhraseanetService/Controller/PSExposeController.php
index bb9e766492..473d941c8f 100644
--- a/lib/Alchemy/Phrasea/PhraseanetService/Controller/PSExposeController.php
+++ b/lib/Alchemy/Phrasea/PhraseanetService/Controller/PSExposeController.php
@@ -209,7 +209,8 @@ class PSExposeController extends Controller
         if (!$session->has($passSessionName) && $providerId != null) {
             try {
                 $provider = $this->getAuthenticationProviders()->get($providerId);
-                if ($provider->getType() == 'PsAuth' && $exposeConfiguration['auth_provider_name'] == $providerId) {
+                // class name
+                if (($provider->getType() == 'Openid' || $provider->getType() == 'PsAuth') && $exposeConfiguration['auth_provider_name'] == $providerId) {
 
                     $session->set($passSessionName, ['access_token' => $provider->getAccessToken()]);
                     $session->set($this->getLoginSessionName($exposeName), $provider->getUserName());
diff --git a/lib/Alchemy/Phrasea/PhraseanetService/Form/PSExposeConnectionType.php b/lib/Alchemy/Phrasea/PhraseanetService/Form/PSExposeConnectionType.php
index 49ec6f7556..e77b0dd5e0 100644
--- a/lib/Alchemy/Phrasea/PhraseanetService/Form/PSExposeConnectionType.php
+++ b/lib/Alchemy/Phrasea/PhraseanetService/Form/PSExposeConnectionType.php
@@ -45,7 +45,7 @@ class PSExposeConnectionType extends AbstractType
                 ]
             ])
             ->add('auth_provider_name', ChoiceType::class, [
-                'label'    => 'admin:phrasea-service-setting:tab:expose:: auth provider name with type ps-auth',
+                'label'    => 'admin:phrasea-service-setting:tab:expose:: auth provider name with type openid',
                 'required' => false,
                 'choice_list' => new ArrayChoiceList(
                     $this->getEligibleProvider()
@@ -117,7 +117,7 @@ class PSExposeConnectionType extends AbstractType
         $values = array_keys(
             array_filter($this->app['conf']->get(['authentication', 'providers'], []),
             function ($provider) {
-                return ($provider['type'] == 'ps-auth' || $provider['type'] == 'PsAuth');
+                  return ($provider['type'] == 'openid' || $provider['type'] == 'ps-auth' || $provider['type'] == 'PsAuth');
              })
         );
 
diff --git a/lib/classes/patch/418RC12PHRAS4007.php b/lib/classes/patch/418RC12PHRAS4007.php
new file mode 100644
index 0000000000..b7f54b8f74
--- /dev/null
+++ b/lib/classes/patch/418RC12PHRAS4007.php
@@ -0,0 +1,98 @@
+<?php
+
+use Alchemy\Phrasea\Application;
+use Alchemy\Phrasea\Core\Configuration\PropertyAccess;
+
+class patch_418RC12PHRAS4007 implements patchInterface
+{
+    /** @var string */
+    private $release = '4.1.8-rc12';
+
+    /** @var array */
+    private $concern = [base::APPLICATION_BOX];
+
+    /**
+     * {@inheritdoc}
+     */
+    public function get_release()
+    {
+        return $this->release;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function getDoctrineMigrations()
+    {
+        return [];
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function require_all_upgrades()
+    {
+        return false;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function concern()
+    {
+        return $this->concern;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function apply(base $base, Application $app)
+    {
+        if ($base->get_base_type() === base::DATA_BOX) {
+            $this->patch_databox($base, $app);
+        } elseif ($base->get_base_type() === base::APPLICATION_BOX) {
+            $this->patch_appbox($base, $app);
+        }
+
+        return true;
+    }
+
+    private function patch_databox(databox $databox, Application $app)
+    {
+    }
+
+    private function patch_appbox(base $appbox, Application $app)
+    {
+        /** @var PropertyAccess $conf */
+        $conf = $app['conf'];
+
+        $providers = $conf->get(['authentication', 'providers']);
+        $providersType = array_column($app['conf']->get(['authentication', 'providers']), 'type');
+
+        // set an example of setting if not exist
+        if (!in_array('openid', $providersType)) {
+            $providers['openid-1'] = [
+                'enabled' => false,
+                'display' => false,
+                'title' => 'openid 1',
+                'type' => 'openid',
+                'options' => [
+                    'client-id'     => 'client_id',
+                    'client-secret' => 'client_secret',
+                    'base-url'      => 'https://keycloak.phrasea.local',
+                    'realm-name'    => 'phrasea',
+                    'exclusive'     => false,
+                    'icon-uri'      => null,
+                    'birth-group'   => '_firstlog',
+                    'everyone-group' => '_everyone',
+                    'metamodel'     => '_metamodel',
+                    'model-gpfx'    => '_M_',
+                    'model-upfx'    => '_U_',
+                    'auto-logout'   => false
+                ]
+            ];
+
+            $conf->set(['authentication', 'providers'], $providers);
+        }
+    }
+}
diff --git a/lib/conf.d/configuration.yml b/lib/conf.d/configuration.yml
index 390aebe395..0cf8ff0c80 100644
--- a/lib/conf.d/configuration.yml
+++ b/lib/conf.d/configuration.yml
@@ -228,24 +228,24 @@ authentication:
             options:
                 client-id: ''
                 client-secret: ''
-        ps_auth_1:
+        openid-1:
             enabled: false
             display: false
-            title: 'PS Auth 1'
-            type: 'ps-auth'
+            title: 'openid 1'
+            type: openid
             options:
                 client-id: ''
                 client-secret: ''
-                base-url: 'https://api-auth.phrasea.local'
-                provider-type: 'oauth'
-                provider-name: 'v2'
-                icon-uri: null,
-                debug: false,
-                birth-group: '_firstlog'
-                everyone-group: '_everyone'
-                metamodel: '_metamodel'
-                model-gpfx: '_M_'
-                model-upfx: '_U_'
+                base-url: 'https://keycloak.phrasea.local'
+                realm-name: phrasea
+                exclusive: false
+                icon-uri: null
+                birth-group: _firstlog
+                everyone-group: _everyone
+                metamodel: _metamodel
+                model-gpfx: _M_
+                model-upfx: _U_
+                debug: false
                 auto-logout: false
                 auto-connect-idp-name: null
 registration-fields:
diff --git a/resources/locales/messages.de.xlf b/resources/locales/messages.de.xlf
index 844e4af54c..34a941f6cf 100644
--- a/resources/locales/messages.de.xlf
+++ b/resources/locales/messages.de.xlf
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <xliff xmlns="urn:oasis:names:tc:xliff:document:1.2" xmlns:jms="urn:jms:translation" version="1.2">
-  <file date="2024-04-17T13:04:48Z" source-language="en" target-language="de" datatype="plaintext" original="not.available">
+  <file date="2024-04-18T08:40:52Z" source-language="en" target-language="de" datatype="plaintext" original="not.available">
     <header>
       <tool tool-id="JMSTranslationBundle" tool-name="JMSTranslationBundle" tool-version="1.1.0-DEV"/>
       <note>The source node in most cases contains the sample message as written by the developer. If it looks like a dot-delimitted string such as "form.label.firstname", then the developer has not provided a default message.</note>
@@ -1098,7 +1098,7 @@
       <trans-unit id="a45ff91e0c1ebb94d62f5daaad1e708278ba484e" resname="An unexpected error occurred during authentication process, please contact an admin" approved="yes">
         <source>An unexpected error occurred during authentication process, please contact an admin</source>
         <target state="translated">Ein Fehler ist bei Ihre Authentifizierung aufgetreten. Bitte wenden Sie sich an Ihren Systemadministrator</target>
-        <jms:reference-file line="833">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="831">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="2063ba5ce348f48f77284c961f2291da1fdd79a5" resname="An upload on %bridge_adapter% failed, the resaon is : %reason%" approved="yes">
         <source>An upload on %bridge_adapter% failed, the resaon is : %reason%</source>
@@ -1243,7 +1243,7 @@
       <trans-unit id="927aacfc684a0654a9fc301f52ed3f2441adb363" resname="Are you sure you want to reset rights?" approved="yes">
         <source>Are you sure you want to reset rights?</source>
         <target state="translated">Sind Sie sicher, die Rechte zurückzusetzen?</target>
-        <jms:reference-file line="1392">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="1401">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="74e0b9c80dca267a78a89ad68a2f6c73241b5973" resname="Attention" approved="yes">
         <source>Attention</source>
@@ -2811,7 +2811,7 @@
       <trans-unit id="4492ab77c9378c5582b87621ecd89c96fef88640" resname="Email '%email%' for login '%login%' already exists in database" approved="yes">
         <source>Email '%email%' for login '%login%' already exists in database</source>
         <target state="translated">Email '%email%' für Login '%login%' existiert schon in der Databank</target>
-        <jms:reference-file line="806">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="814">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="e4aaac273d3c0d793207e6b559a7b7f97d543064" resname="Email Name">
         <source>Email Name</source>
@@ -4246,17 +4246,17 @@
       <trans-unit id="950c019b3fdf4ee87547ab457330c0f003fdec4b" resname="Login %login% already exists in database" approved="yes">
         <source>Login %login% already exists in database</source>
         <target state="translated">Benutzername %login% existiert schon im Datenbank</target>
-        <jms:reference-file line="790">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="798">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="092417444255d19227b90cb8b6a31eb531c3e045" resname="Login %login% is already defined in the file at line %line%" approved="yes">
         <source>Login %login% is already defined in the file at line %line%</source>
         <target state="translated">Benutzername %login% ist schon in Datei in Linie %line% definiert</target>
-        <jms:reference-file line="784">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="792">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="01a1b17937851d24fabec72d491bfe7693dcbeb5" resname="Login line %line% is empty" approved="yes">
         <source>Login line %line% is empty</source>
         <target state="translated">Benutzername Zeile %line% ist leer</target>
-        <jms:reference-file line="782">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="790">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="9a839961790bd116cb1d19dd249a0f68170ea33d" resname="Login to link your account" approved="yes">
         <source>Login to link your account</source>
@@ -4278,7 +4278,7 @@
       <trans-unit id="c176d759339c846576bc2937aab7e01f5404e4e3" resname="Mail line %line% is empty" approved="yes">
         <source>Mail line %line% is empty</source>
         <target state="translated">Email Zeile %line% ist leer</target>
-        <jms:reference-file line="804">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="812">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="fdb9efd7a759711741fc699549c92e54c664e38c" resname="Mail sent" approved="yes">
         <source>Mail sent</source>
@@ -4988,7 +4988,7 @@
       <trans-unit id="6e77cc0549ad99a9d3ba5c384f7f329db24d6d0c" resname="Password is empty at line %line%" approved="yes">
         <source>Password is empty at line %line%</source>
         <target state="translated">Passwort ist leer in Zeile %line%</target>
-        <jms:reference-file line="819">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="827">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="d8be7287e7454f5c5ed0f570424a959724db8d9b" resname="Past year" approved="yes">
         <source>Past year</source>
@@ -5054,7 +5054,7 @@
       <trans-unit id="17d47194ec888edc3eb2a8f200f0400f787924ff" resname="Phraseanet guest-access is disabled" approved="yes">
         <source>Phraseanet guest-access is disabled</source>
         <target state="translated">Phraseanet Gast Zugriff ist deaktiviert</target>
-        <jms:reference-file line="596">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="594">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="f76e81b1e826c0255a8e7e2b0e9c8f6c33bba34c" resname="Phraseanet may require many binaries." approved="yes">
         <source>Phraseanet may require many binaries.</source>
@@ -7078,7 +7078,7 @@
       <trans-unit id="a5d2dca08b69ce907e38ed1bf35fc219df18edb3" resname="Unable to authenticate with %provider_name%" approved="yes">
         <source>Unable to authenticate with %provider_name%</source>
         <target state="translated">Unmöglich, mit %provider_name% zu authentifizieren</target>
-        <jms:reference-file line="726">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="724">Controller/Root/LoginController.php</jms:reference-file>
         <jms:reference-file line="217">Controller/Api/OAuth2Controller.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="7adcfb8dcac6fb17a9283fcb6b53f1e31ca2f3a0" resname="Unable to connect to MySQL server" approved="yes">
@@ -7096,12 +7096,12 @@
       <trans-unit id="225f62661868b2c3fb3820c94c5727f70b1e7d4c" resname="Unable to create template, the name is already used." approved="yes">
         <source>Unable to create template, the name is already used.</source>
         <target state="translated">Unmöglich, eine Vorlage zu erstellen; die Name wird schon benutzt.</target>
-        <jms:reference-file line="403">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="411">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="ac9cb56f58dc3e077f9557ed6958e993dae09e71" resname="Unable to create the user." approved="yes">
         <source>Unable to create the user.</source>
         <target state="translated">Unmöglich, den Benutzer zu erstellen.</target>
-        <jms:reference-file line="405">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="413">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="5660d6aac90c7a8f4df9fcad68513c061bef3298" resname="Unable to delete list" approved="yes">
         <source>Unable to delete list</source>
@@ -7121,7 +7121,7 @@
       <trans-unit id="c8cfcd74a9813267d93550c9cf1d2930f23815f0" resname="Unable to retrieve provider identity" approved="yes">
         <source>Unable to retrieve provider identity</source>
         <target state="translated">unmöglich, Provider Identität abzurufen</target>
-        <jms:reference-file line="749">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="747">Controller/Root/LoginController.php</jms:reference-file>
         <jms:reference-file line="234">Controller/Api/OAuth2Controller.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="6af8293be2ccc7fc664c96b11293a226fd300026" resname="Unable to send the documents">
@@ -7341,7 +7341,7 @@
       <trans-unit id="01cb944f89ac99378a7b2fa31bec677774328456" resname="User's publications in feeds">
         <source>User's publications in feeds</source>
         <target state="translated">Veröffentlichung(en) des Nutzers in Feeds</target>
-        <jms:reference-file line="805">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="814">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="57f2b181d0a5e79a147ea1cdf41457f58dbbb3c9" resname="Users" approved="yes">
         <source>Users</source>
@@ -7576,7 +7576,7 @@
       <trans-unit id="0d3d97ffc6b526aad5b5c5e4f99df4298a48ce0b" resname="Vous etes maintenant deconnecte. A bientot." approved="yes">
         <source>Vous etes maintenant deconnecte. A bientot.</source>
         <target state="translated">Sie sind nun erfolgreich abgemeldet. Bis bald!</target>
-        <jms:reference-file line="532">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="530">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="2b31652d33be49a2d9d3187a0c31719a1c834f18" resname="Vous n'avez pas assez de droits sur certains elements selectionnes" approved="yes">
         <source>Vous n'avez pas assez de droits sur certains elements selectionnes</source>
@@ -7995,7 +7995,7 @@
       <trans-unit id="ff2e2369a8f0959a7f665f926ec4d84b3c5a46f5" resname="Your identity is not recognized." approved="yes">
         <source>Your identity is not recognized.</source>
         <target state="translated">Ihre Identität wird nicht erkannt</target>
-        <jms:reference-file line="790">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="788">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="aaf57216976f942ee7fe118918b2b8893bde955f" resname="Your install might need to build some sub-definitions" approved="yes">
         <source>Your install might need to build some sub-definitions</source>
@@ -8187,7 +8187,7 @@
       <trans-unit id="3c26ea0c44c762e63aa75169b15a670e3fdc1e97" resname="admin :users: user owned api">
         <source>admin :users: user owned api</source>
         <target state="translated">Owner</target>
-        <jms:reference-file line="628">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="637">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="3255d759dad94eb721100214aa939ff692a4c2cd" resname="admin:: La collection n'a pas ete creee : vous devez donner un nom a votre collection" approved="yes">
         <source>admin:: La collection n'a pas ete creee : vous devez donner un nom a votre collection</source>
@@ -8609,7 +8609,7 @@
         <source>admin::compte-utilisateur activite</source>
         <target state="translated">Tätigkeit</target>
         <jms:reference-file line="104">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="444">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="452">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="558">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="221">admin/user/registrations.html.twig</jms:reference-file>
         <jms:reference-file line="122">web/account/account.html.twig</jms:reference-file>
@@ -8618,7 +8618,7 @@
         <source>admin::compte-utilisateur adresse</source>
         <target state="translated">Adresse</target>
         <jms:reference-file line="69">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="436">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="444">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="414">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="517">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="225">admin/user/registrations.html.twig</jms:reference-file>
@@ -8633,7 +8633,7 @@
         <source>admin::compte-utilisateur code postal</source>
         <target state="translated">PLZ</target>
         <jms:reference-file line="76">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="438">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="446">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="421">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="525">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="94">web/account/account.html.twig</jms:reference-file>
@@ -8663,7 +8663,7 @@
         <source>admin::compte-utilisateur email</source>
         <target state="translated">E-Mail</target>
         <jms:reference-file line="117">Event/Subscriber/RegistrationSubscriber.php</jms:reference-file>
-        <jms:reference-file line="433">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="441">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="361">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="151">web/admin/users.html.twig</jms:reference-file>
         <jms:reference-file line="22">web/admin/connected-users.html.twig</jms:reference-file>
@@ -8675,7 +8675,7 @@
         <source>admin::compte-utilisateur fax</source>
         <target state="translated">Fax</target>
         <jms:reference-file line="118">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="441">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="449">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="575">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="136">web/account/account.html.twig</jms:reference-file>
       </trans-unit>
@@ -8711,7 +8711,7 @@
         <target state="translated">Name</target>
         <jms:reference-file line="62">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
         <jms:reference-file line="115">Event/Subscriber/RegistrationSubscriber.php</jms:reference-file>
-        <jms:reference-file line="431">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="439">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="379">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="13">web/admin/connected-users.html.twig</jms:reference-file>
         <jms:reference-file line="501">web/admin/editusers.html.twig</jms:reference-file>
@@ -8726,14 +8726,14 @@
       <trans-unit id="1b83f90c602146fc09f3e025507c9b11aa10772a" resname="admin::compte-utilisateur pays" approved="yes">
         <source>admin::compte-utilisateur pays</source>
         <target state="translated">Land</target>
-        <jms:reference-file line="439">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="447">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="156">web/admin/users.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="28c517ddecdb662c767290d2e1fa53ef198307fa" resname="admin::compte-utilisateur poste" approved="yes">
         <source>admin::compte-utilisateur poste</source>
         <target state="translated">Beruf</target>
         <jms:reference-file line="90">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="442">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="450">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="407">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="542">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="219">admin/user/registrations.html.twig</jms:reference-file>
@@ -8744,7 +8744,7 @@
         <target state="translated">Vorname</target>
         <jms:reference-file line="55">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
         <jms:reference-file line="116">Event/Subscriber/RegistrationSubscriber.php</jms:reference-file>
-        <jms:reference-file line="432">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="440">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="386">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="493">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="213">admin/user/registrations.html.twig</jms:reference-file>
@@ -8761,7 +8761,7 @@
         <source>admin::compte-utilisateur societe</source>
         <target state="translated">Unternehmen</target>
         <jms:reference-file line="97">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="443">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="451">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="400">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="146">web/admin/users.html.twig</jms:reference-file>
         <jms:reference-file line="16">web/admin/connected-users.html.twig</jms:reference-file>
@@ -8777,7 +8777,7 @@
       <trans-unit id="aa3ffb658796d685813791430da4efdac145b8d9" resname="admin::compte-utilisateur telephone" approved="yes">
         <source>admin::compte-utilisateur telephone</source>
         <target state="translated">Telefon</target>
-        <jms:reference-file line="440">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="448">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="393">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="19">web/admin/connected-users.html.twig</jms:reference-file>
         <jms:reference-file line="567">web/admin/editusers.html.twig</jms:reference-file>
@@ -8793,7 +8793,7 @@
         <source>admin::compte-utilisateur ville</source>
         <target state="translated">Ort</target>
         <jms:reference-file line="83">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="437">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="445">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="428">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="533">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="101">web/account/account.html.twig</jms:reference-file>
@@ -9343,12 +9343,12 @@
       <trans-unit id="382c04ad6bd750ac249b38f17889d00baed79984" resname="admin::users: Api id">
         <source>admin::users: Api id</source>
         <target state="translated">Id</target>
-        <jms:reference-file line="663">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="672">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="f2cfa8b40f83359062cca1806e40e189c001b404" resname="admin::users: Api name">
         <source>admin::users: Api name</source>
         <target state="translated">Name</target>
-        <jms:reference-file line="664">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="673">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="b7c39510d9e25cf5af8c360cce029ffa1dc2ef88" resname="admin::users: Auth failure">
         <source>admin::users: Auth failure</source>
@@ -9358,7 +9358,7 @@
       <trans-unit id="a1c3bbe023ec149af9ca57351a03532f25d9c475" resname="admin::users: api ID">
         <source>admin::users: api ID</source>
         <target state="translated">API ID</target>
-        <jms:reference-file line="633">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="642">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="e12b10eeccf3c4f722e66750eaa2886573a6b803" resname="admin::users: api list">
         <source>admin::users: api list</source>
@@ -9368,27 +9368,27 @@
       <trans-unit id="1f92b414f86ee855323c7d9ffba61c091ebea92f" resname="admin::users: api oauth code list">
         <source>admin::users: api oauth code list</source>
         <target state="translated">Oauth requests</target>
-        <jms:reference-file line="659">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="668">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="fc7984833e39797984814936ab510cfd4080bc18" resname="admin::users: auth failure locked list">
         <source>admin::users: auth failure locked list</source>
         <target state="translated">Authentifizierungsfehler</target>
-        <jms:reference-file line="690">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="699">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="a7cc508c7cb0f9b1d27e69e9a422670183236ec5" resname="admin::users: auth failure unlocked list">
         <source>admin::users: auth failure unlocked list</source>
         <target state="translated">Verlauf der fehlgeschlagenen Authentifizierungen (letzte 2 Monate)</target>
-        <jms:reference-file line="717">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="726">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="333dc596de24529211ed2966582e8aae28b72238" resname="admin::users: creation date">
         <source>admin::users: creation date</source>
         <target state="translated">Erstellungsdatum</target>
         <jms:reference-file line="18">web/admin/auth-failure.html.twig</jms:reference-file>
-        <jms:reference-file line="601">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="634">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="667">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="696">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="723">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="610">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="643">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="676">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="705">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="732">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="c767eb6f0297cbffa3fa9591dc197542c96a8bae" resname="admin::users: delete auth failure">
         <source>admin::users: delete auth failure</source>
@@ -9398,7 +9398,7 @@
       <trans-unit id="e2d00e6f420c23a8910d8c20a4a938cac197bb8e" resname="admin::users: distance_id">
         <source>admin::users: distance_id</source>
         <target state="translated">IDP Id</target>
-        <jms:reference-file line="600">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="609">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="e7ab6de2942a61fb7b79f5f4b4e3d95db0fe528f" resname="admin::users: erase auth failure table">
         <source>admin::users: erase auth failure table</source>
@@ -9408,24 +9408,24 @@
       <trans-unit id="8e47404e0029c675581606660cbe525ff1f9c749" resname="admin::users: grant password info">
         <source>admin::users: grant password info</source>
         <target state="translated">Password Granted</target>
-        <jms:reference-file line="637">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="646">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="3fc5e0916ce91a50c260f25b88bcc5e36b089210" resname="admin::users: ip">
         <source>admin::users: ip</source>
         <target state="translated">IP-Adresse</target>
         <jms:reference-file line="16">web/admin/auth-failure.html.twig</jms:reference-file>
-        <jms:reference-file line="695">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="722">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="704">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="731">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="b334c6f1e8ef850c8b78d860550e66bbd5a299e9" resname="admin::users: list user api application">
         <source>admin::users: list user api application</source>
         <target state="translated">API Anwendung</target>
-        <jms:reference-file line="620">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="629">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="496a4f6a90f31903c0220ff8cee21bf75a473c4f" resname="admin::users: list user providers">
         <source>admin::users: list user providers</source>
         <target state="translated">Auth Provider</target>
-        <jms:reference-file line="596">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="605">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="4344a147edb8f171db16fa1916addea8d5ebde19" resname="admin::users: locked">
         <source>admin::users: locked</source>
@@ -9435,72 +9435,72 @@
       <trans-unit id="e76893b673dcca93abf91a13f24e586b7f399823" resname="admin::users: modification date">
         <source>admin::users: modification date</source>
         <target state="translated">Änderungsdatum</target>
-        <jms:reference-file line="602">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="635">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="611">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="644">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="0a71173381c1c8b659c9f7ac05cd5dfed8d3b97e" resname="admin::users: no api defined for this user">
         <source>admin::users: no api defined for this user</source>
         <target state="translated">Keine API für diesen Benutzer wurde definiert</target>
-        <jms:reference-file line="654">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="663">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="85d760f5a5e3b7c29f17485512d9225ccdd40811" resname="admin::users: password granted">
         <source>admin::users: password granted</source>
         <target state="translated">Ja</target>
         <jms:reference-file line="107">admin/inspector/record-index.html.twig</jms:reference-file>
-        <jms:reference-file line="638">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="647">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="74411bbacf01ba76709c7cf0135e7c4aeed0c180" resname="admin::users: password not granted">
         <source>admin::users: password not granted</source>
         <target state="translated">Nein</target>
         <jms:reference-file line="109">admin/inspector/record-index.html.twig</jms:reference-file>
-        <jms:reference-file line="638">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="647">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="3c6e9df1925ca0ae9df114b4c17e7667ec66f5d7" resname="admin::users: provider">
         <source>admin::users: provider</source>
         <target state="translated">Autorisierungsanbieter</target>
-        <jms:reference-file line="599">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="608">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="6cfb4576a83ebc4343a74a84024777119fadbd25" resname="admin::users: redirect uri">
         <source>admin::users: redirect uri</source>
         <target state="translated">Redirect uri</target>
-        <jms:reference-file line="665">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="674">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="af5cd4f04496cdfefe14ae0737a3a9ea175203a9" resname="admin::users: reset auth failure">
         <source>admin::users: reset auth failure</source>
         <target state="translated">Zurücksetzen des Fehlerzählers</target>
-        <jms:reference-file line="710">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="719">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="4bba269c4ff3ce66aed91e3da5d9ecc27eb46de1" resname="admin::users: scope">
         <source>admin::users: scope</source>
         <target state="translated">Scope</target>
-        <jms:reference-file line="666">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="675">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="e6ca0a61942f216df1672e612b4e27fdbf498ca2" resname="admin::users: type info">
         <source>admin::users: type info</source>
         <target state="translated">Typ</target>
-        <jms:reference-file line="640">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="649">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="fe2cdf3da09f988f7531c1a794f9754fdcfaa00e" resname="admin::users: user api use">
         <source>admin::users: user api use</source>
         <target state="translated">Benutzt</target>
-        <jms:reference-file line="630">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="639">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="54592d34674af3046462e72065524cdc0c7352a1" resname="admin::users: username">
         <source>admin::users: username</source>
         <target state="translated">Benutzername</target>
         <jms:reference-file line="15">web/admin/auth-failure.html.twig</jms:reference-file>
-        <jms:reference-file line="694">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="721">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="703">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="730">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="6677c212551cdee298546dbe82fa8bdfa6c2e51c" resname="admin::users: webhook activation">
         <source>admin::users: webhook activation</source>
         <target state="translated">Webhook activation</target>
-        <jms:reference-file line="644">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="653">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="77b1da0932d4748877dc55b8321a96460a7e8ab0" resname="admin::users: webhook url">
         <source>admin::users: webhook url</source>
         <target state="translated">Webhook URL</target>
-        <jms:reference-file line="641">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="650">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="68a6b3e4f84d0b990bb8da26132116dc6185d5ce" resname="admin::users:edit: Manage inline selection" approved="yes">
         <source>admin::users:edit: Manage inline selection</source>
@@ -10062,9 +10062,9 @@
         <target state="translated">Expose Service in Prod aktivieren</target>
         <jms:reference-file line="29">PhraseanetService/Form/PSExposeConfigurationType.php</jms:reference-file>
       </trans-unit>
-      <trans-unit id="83403d4291975d8f707f1a24554617ed711143d0" resname="admin:phrasea-service-setting:tab:expose:: auth provider name with type ps-auth">
-        <source>admin:phrasea-service-setting:tab:expose:: auth provider name with type ps-auth</source>
-        <target state="translated">Name des Authentifizierungsanbieters mit Typ ps-auth</target>
+      <trans-unit id="e247d6ed88683925b4f13f7cc2c4d6b97d1efa9e" resname="admin:phrasea-service-setting:tab:expose:: auth provider name with type openid">
+        <source>admin:phrasea-service-setting:tab:expose:: auth provider name with type openid</source>
+        <target state="new">admin:phrasea-service-setting:tab:expose:: auth provider name with type openid</target>
         <jms:reference-file line="48">PhraseanetService/Form/PSExposeConnectionType.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="efcf63b34a4b02de67804c139282d1c5d3d05b0b" resname="admin:phrasea-service-setting:tab:expose:: verify ssl">
@@ -10501,7 +10501,7 @@
         <jms:reference-file line="25">Bridge/Dailymotion/playlist_createcontainer.html.twig</jms:reference-file>
         <jms:reference-file line="44">admin/collection/details.html.twig</jms:reference-file>
         <jms:reference-file line="223">admin/publications/fiche.html.twig</jms:reference-file>
-        <jms:reference-file line="859">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="868">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="50">user/import/file.html.twig</jms:reference-file>
         <jms:reference-file line="69">admin/databox/details.html.twig</jms:reference-file>
         <jms:reference-file line="163">admin/statusbit/edit.html.twig</jms:reference-file>
@@ -10615,7 +10615,7 @@
         <jms:reference-file line="128">admin/publications/fiche.html.twig</jms:reference-file>
         <jms:reference-file line="45">admin/publications/list.html.twig</jms:reference-file>
         <jms:reference-file line="415">web/admin/subdefs.html.twig</jms:reference-file>
-        <jms:reference-file line="858">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="867">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="83">web/admin/setup.html.twig</jms:reference-file>
         <jms:reference-file line="34">web/admin/structure.html.twig</jms:reference-file>
         <jms:reference-file line="117">web/admin/dashboard.html.twig</jms:reference-file>
@@ -10649,13 +10649,13 @@
         <target state="translated">Alle Databox</target>
         <jms:reference-file line="47">admin/worker-manager/worker_info.html.twig</jms:reference-file>
         <jms:reference-file line="22">admin/inspector/record-index.html.twig</jms:reference-file>
-        <jms:reference-file line="748">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="825">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="757">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="834">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="f013ff9e62d4ae563de3270b3297f9da2afefcc9" resname="button::choose type">
         <source>button::choose type</source>
         <target state="translated">Typ auswählen</target>
-        <jms:reference-file line="755">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="764">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="1dd4da0afbec8df77d3124368070a28fa3fc8960" resname="button::no">
         <source>button::no</source>
@@ -11725,18 +11725,18 @@
       <trans-unit id="8af68da04218b6188405e5f7422866b5412ec7a8" resname="login::erreur: Erreur d'authentification" approved="yes">
         <source>login::erreur: Erreur d'authentification</source>
         <target state="translated">Anmeldefehler</target>
-        <jms:reference-file line="863">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="861">Controller/Root/LoginController.php</jms:reference-file>
         <jms:reference-file line="103">Controller/Api/OAuth2Controller.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="e7678ea875773920bf91f79b62b97f31986f211b" resname="login::erreur: No available connection - Please contact sys-admin" approved="yes">
         <source>login::erreur: No available connection - Please contact sys-admin</source>
         <target state="translated">Fehler: Keine verfügbare Verbindung - Bitte kontaktieren Sie den Administrator</target>
-        <jms:reference-file line="555">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="553">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="dcc7f0cac10852ef9bcc7f10019e2679174e3df7" resname="login::erreur: Vous n'avez pas confirme votre email" approved="yes">
         <source>login::erreur: Vous n'avez pas confirme votre email</source>
         <target state="translated">Zugriff nicht möglich. Sie haben Ihre E-Mail Adresse noch nicht bestätigt</target>
-        <jms:reference-file line="856">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="854">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="5cdbff50d2a3ae92720c5af32d4cd560d1351a91" resname="login::notification: Changements enregistres" approved="yes">
         <source>login::notification: Changements enregistres</source>
@@ -11785,12 +11785,12 @@
       <trans-unit id="ace8a8481cf18b9b69c30aa34a65135ed2d75277" resname="login::register:email: Vous avez ete accepte sur les collections suivantes : " approved="yes">
         <source>login::register:email: Vous avez ete accepte sur les collections suivantes :</source>
         <target state="translated">Ihr Zugriff wurde für die folgende Kollektionen genehmigt :</target>
-        <jms:reference-file line="672">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="680">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="20fc11d974588d0abed50d717ed3174eff70ac83" resname="login::register:email: Vous avez ete refuse sur les collections suivantes : " approved="yes">
         <source>login::register:email: Vous avez ete refuse sur les collections suivantes :</source>
         <target state="translated">Ihr Zugriff wurde für die folgende Kollektionen abgelehnt :</target>
-        <jms:reference-file line="675">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="683">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="ea4440bd94714e4e85334618405679ae2e36f4f1" resname="mai" approved="yes">
         <source>mai</source>
diff --git a/resources/locales/messages.en.xlf b/resources/locales/messages.en.xlf
index 6f180623d9..fd59680723 100644
--- a/resources/locales/messages.en.xlf
+++ b/resources/locales/messages.en.xlf
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <xliff xmlns="urn:oasis:names:tc:xliff:document:1.2" xmlns:jms="urn:jms:translation" version="1.2">
-  <file date="2024-04-17T13:05:04Z" source-language="en" target-language="en" datatype="plaintext" original="not.available">
+  <file date="2024-04-18T08:41:08Z" source-language="en" target-language="en" datatype="plaintext" original="not.available">
     <header>
       <tool tool-id="JMSTranslationBundle" tool-name="JMSTranslationBundle" tool-version="1.1.0-DEV"/>
       <note>The source node in most cases contains the sample message as written by the developer. If it looks like a dot-delimitted string such as "form.label.firstname", then the developer has not provided a default message.</note>
@@ -1099,7 +1099,7 @@
       <trans-unit id="a45ff91e0c1ebb94d62f5daaad1e708278ba484e" resname="An unexpected error occurred during authentication process, please contact an admin" approved="yes">
         <source>An unexpected error occurred during authentication process, please contact an admin</source>
         <target state="translated">An unexpected error has occured during authentication process. Please contact an admin</target>
-        <jms:reference-file line="833">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="831">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="2063ba5ce348f48f77284c961f2291da1fdd79a5" resname="An upload on %bridge_adapter% failed, the resaon is : %reason%" approved="yes">
         <source>An upload on %bridge_adapter% failed, the resaon is : %reason%</source>
@@ -1244,7 +1244,7 @@
       <trans-unit id="927aacfc684a0654a9fc301f52ed3f2441adb363" resname="Are you sure you want to reset rights?" approved="yes">
         <source>Are you sure you want to reset rights?</source>
         <target state="translated">Are you sure you want to reset the user rights?</target>
-        <jms:reference-file line="1392">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="1401">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="74e0b9c80dca267a78a89ad68a2f6c73241b5973" resname="Attention" approved="yes">
         <source>Attention</source>
@@ -2813,7 +2813,7 @@
       <trans-unit id="4492ab77c9378c5582b87621ecd89c96fef88640" resname="Email '%email%' for login '%login%' already exists in database" approved="yes">
         <source>Email '%email%' for login '%login%' already exists in database</source>
         <target state="translated">E-mail '%email%' for login '%login%' already exists in database</target>
-        <jms:reference-file line="806">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="814">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="e4aaac273d3c0d793207e6b559a7b7f97d543064" resname="Email Name" approved="yes">
         <source>Email Name</source>
@@ -4248,17 +4248,17 @@
       <trans-unit id="950c019b3fdf4ee87547ab457330c0f003fdec4b" resname="Login %login% already exists in database" approved="yes">
         <source>Login %login% already exists in database</source>
         <target state="translated">Login %login% already exists in database</target>
-        <jms:reference-file line="790">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="798">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="092417444255d19227b90cb8b6a31eb531c3e045" resname="Login %login% is already defined in the file at line %line%" approved="yes">
         <source>Login %login% is already defined in the file at line %line%</source>
         <target state="translated">Login %login% already exists in the file line %line%</target>
-        <jms:reference-file line="784">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="792">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="01a1b17937851d24fabec72d491bfe7693dcbeb5" resname="Login line %line% is empty" approved="yes">
         <source>Login line %line% is empty</source>
         <target state="translated">Login line %line% is empty</target>
-        <jms:reference-file line="782">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="790">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="9a839961790bd116cb1d19dd249a0f68170ea33d" resname="Login to link your account" approved="yes">
         <source>Login to link your account</source>
@@ -4280,7 +4280,7 @@
       <trans-unit id="c176d759339c846576bc2937aab7e01f5404e4e3" resname="Mail line %line% is empty" approved="yes">
         <source>Mail line %line% is empty</source>
         <target state="translated">E-mail line %line% is empty</target>
-        <jms:reference-file line="804">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="812">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="fdb9efd7a759711741fc699549c92e54c664e38c" resname="Mail sent" approved="yes">
         <source>Mail sent</source>
@@ -4990,7 +4990,7 @@
       <trans-unit id="6e77cc0549ad99a9d3ba5c384f7f329db24d6d0c" resname="Password is empty at line %line%" approved="yes">
         <source>Password is empty at line %line%</source>
         <target state="translated">Password is empty in line %line%</target>
-        <jms:reference-file line="819">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="827">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="d8be7287e7454f5c5ed0f570424a959724db8d9b" resname="Past year" approved="yes">
         <source>Past year</source>
@@ -5056,7 +5056,7 @@
       <trans-unit id="17d47194ec888edc3eb2a8f200f0400f787924ff" resname="Phraseanet guest-access is disabled" approved="yes">
         <source>Phraseanet guest-access is disabled</source>
         <target state="translated">Phraseanet guest-access is disabled.</target>
-        <jms:reference-file line="596">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="594">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="f76e81b1e826c0255a8e7e2b0e9c8f6c33bba34c" resname="Phraseanet may require many binaries." approved="yes">
         <source>Phraseanet may require many binaries.</source>
@@ -7080,7 +7080,7 @@
       <trans-unit id="a5d2dca08b69ce907e38ed1bf35fc219df18edb3" resname="Unable to authenticate with %provider_name%" approved="yes">
         <source>Unable to authenticate with %provider_name%</source>
         <target state="translated">Unable to authenticate with %provider_name%</target>
-        <jms:reference-file line="726">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="724">Controller/Root/LoginController.php</jms:reference-file>
         <jms:reference-file line="217">Controller/Api/OAuth2Controller.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="7adcfb8dcac6fb17a9283fcb6b53f1e31ca2f3a0" resname="Unable to connect to MySQL server" approved="yes">
@@ -7098,12 +7098,12 @@
       <trans-unit id="225f62661868b2c3fb3820c94c5727f70b1e7d4c" resname="Unable to create template, the name is already used." approved="yes">
         <source>Unable to create template, the name is already used.</source>
         <target state="translated">Unable to create template, the name is already used.</target>
-        <jms:reference-file line="403">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="411">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="ac9cb56f58dc3e077f9557ed6958e993dae09e71" resname="Unable to create the user." approved="yes">
         <source>Unable to create the user.</source>
         <target state="translated">Unable to create the user.</target>
-        <jms:reference-file line="405">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="413">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="5660d6aac90c7a8f4df9fcad68513c061bef3298" resname="Unable to delete list" approved="yes">
         <source>Unable to delete list</source>
@@ -7123,7 +7123,7 @@
       <trans-unit id="c8cfcd74a9813267d93550c9cf1d2930f23815f0" resname="Unable to retrieve provider identity" approved="yes">
         <source>Unable to retrieve provider identity</source>
         <target state="translated">Unable to retrieve provider identity.</target>
-        <jms:reference-file line="749">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="747">Controller/Root/LoginController.php</jms:reference-file>
         <jms:reference-file line="234">Controller/Api/OAuth2Controller.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="6af8293be2ccc7fc664c96b11293a226fd300026" resname="Unable to send the documents" approved="yes">
@@ -7343,7 +7343,7 @@
       <trans-unit id="01cb944f89ac99378a7b2fa31bec677774328456" resname="User's publications in feeds">
         <source>User's publications in feeds</source>
         <target state="translated">User's publication(s) in feeds</target>
-        <jms:reference-file line="805">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="814">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="57f2b181d0a5e79a147ea1cdf41457f58dbbb3c9" resname="Users" approved="yes">
         <source>Users</source>
@@ -7578,7 +7578,7 @@
       <trans-unit id="0d3d97ffc6b526aad5b5c5e4f99df4298a48ce0b" resname="Vous etes maintenant deconnecte. A bientot." approved="yes">
         <source>Vous etes maintenant deconnecte. A bientot.</source>
         <target state="translated">You are now disconnected. See you soon.</target>
-        <jms:reference-file line="532">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="530">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="2b31652d33be49a2d9d3187a0c31719a1c834f18" resname="Vous n'avez pas assez de droits sur certains elements selectionnes" approved="yes">
         <source>Vous n'avez pas assez de droits sur certains elements selectionnes</source>
@@ -7997,7 +7997,7 @@
       <trans-unit id="ff2e2369a8f0959a7f665f926ec4d84b3c5a46f5" resname="Your identity is not recognized." approved="yes">
         <source>Your identity is not recognized.</source>
         <target state="translated">Your identity is not recognized.</target>
-        <jms:reference-file line="790">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="788">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="aaf57216976f942ee7fe118918b2b8893bde955f" resname="Your install might need to build some sub-definitions" approved="yes">
         <source>Your install might need to build some sub-definitions</source>
@@ -8189,7 +8189,7 @@
       <trans-unit id="3c26ea0c44c762e63aa75169b15a670e3fdc1e97" resname="admin :users: user owned api">
         <source>admin :users: user owned api</source>
         <target state="translated">Owner</target>
-        <jms:reference-file line="628">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="637">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="3255d759dad94eb721100214aa939ff692a4c2cd" resname="admin:: La collection n'a pas ete creee : vous devez donner un nom a votre collection" approved="yes">
         <source>admin:: La collection n'a pas ete creee : vous devez donner un nom a votre collection</source>
@@ -8611,7 +8611,7 @@
         <source>admin::compte-utilisateur activite</source>
         <target state="translated">Activity</target>
         <jms:reference-file line="104">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="444">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="452">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="558">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="221">admin/user/registrations.html.twig</jms:reference-file>
         <jms:reference-file line="122">web/account/account.html.twig</jms:reference-file>
@@ -8620,7 +8620,7 @@
         <source>admin::compte-utilisateur adresse</source>
         <target state="translated">Address</target>
         <jms:reference-file line="69">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="436">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="444">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="414">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="517">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="225">admin/user/registrations.html.twig</jms:reference-file>
@@ -8635,7 +8635,7 @@
         <source>admin::compte-utilisateur code postal</source>
         <target state="translated">Zip code</target>
         <jms:reference-file line="76">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="438">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="446">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="421">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="525">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="94">web/account/account.html.twig</jms:reference-file>
@@ -8665,7 +8665,7 @@
         <source>admin::compte-utilisateur email</source>
         <target state="translated">E-mail</target>
         <jms:reference-file line="117">Event/Subscriber/RegistrationSubscriber.php</jms:reference-file>
-        <jms:reference-file line="433">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="441">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="361">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="151">web/admin/users.html.twig</jms:reference-file>
         <jms:reference-file line="22">web/admin/connected-users.html.twig</jms:reference-file>
@@ -8677,7 +8677,7 @@
         <source>admin::compte-utilisateur fax</source>
         <target state="translated">Fax</target>
         <jms:reference-file line="118">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="441">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="449">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="575">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="136">web/account/account.html.twig</jms:reference-file>
       </trans-unit>
@@ -8713,7 +8713,7 @@
         <target state="translated">Last name</target>
         <jms:reference-file line="62">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
         <jms:reference-file line="115">Event/Subscriber/RegistrationSubscriber.php</jms:reference-file>
-        <jms:reference-file line="431">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="439">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="379">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="13">web/admin/connected-users.html.twig</jms:reference-file>
         <jms:reference-file line="501">web/admin/editusers.html.twig</jms:reference-file>
@@ -8728,14 +8728,14 @@
       <trans-unit id="1b83f90c602146fc09f3e025507c9b11aa10772a" resname="admin::compte-utilisateur pays" approved="yes">
         <source>admin::compte-utilisateur pays</source>
         <target state="translated">Country</target>
-        <jms:reference-file line="439">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="447">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="156">web/admin/users.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="28c517ddecdb662c767290d2e1fa53ef198307fa" resname="admin::compte-utilisateur poste" approved="yes">
         <source>admin::compte-utilisateur poste</source>
         <target state="translated">Job</target>
         <jms:reference-file line="90">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="442">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="450">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="407">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="542">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="219">admin/user/registrations.html.twig</jms:reference-file>
@@ -8746,7 +8746,7 @@
         <target state="translated">First name</target>
         <jms:reference-file line="55">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
         <jms:reference-file line="116">Event/Subscriber/RegistrationSubscriber.php</jms:reference-file>
-        <jms:reference-file line="432">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="440">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="386">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="493">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="213">admin/user/registrations.html.twig</jms:reference-file>
@@ -8763,7 +8763,7 @@
         <source>admin::compte-utilisateur societe</source>
         <target state="translated">Company</target>
         <jms:reference-file line="97">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="443">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="451">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="400">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="146">web/admin/users.html.twig</jms:reference-file>
         <jms:reference-file line="16">web/admin/connected-users.html.twig</jms:reference-file>
@@ -8779,7 +8779,7 @@
       <trans-unit id="aa3ffb658796d685813791430da4efdac145b8d9" resname="admin::compte-utilisateur telephone" approved="yes">
         <source>admin::compte-utilisateur telephone</source>
         <target state="translated">Phone</target>
-        <jms:reference-file line="440">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="448">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="393">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="19">web/admin/connected-users.html.twig</jms:reference-file>
         <jms:reference-file line="567">web/admin/editusers.html.twig</jms:reference-file>
@@ -8795,7 +8795,7 @@
         <source>admin::compte-utilisateur ville</source>
         <target state="translated">City</target>
         <jms:reference-file line="83">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="437">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="445">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="428">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="533">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="101">web/account/account.html.twig</jms:reference-file>
@@ -9345,12 +9345,12 @@
       <trans-unit id="382c04ad6bd750ac249b38f17889d00baed79984" resname="admin::users: Api id">
         <source>admin::users: Api id</source>
         <target state="translated">Api id</target>
-        <jms:reference-file line="663">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="672">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="f2cfa8b40f83359062cca1806e40e189c001b404" resname="admin::users: Api name">
         <source>admin::users: Api name</source>
         <target state="translated">Name</target>
-        <jms:reference-file line="664">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="673">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="b7c39510d9e25cf5af8c360cce029ffa1dc2ef88" resname="admin::users: Auth failure">
         <source>admin::users: Auth failure</source>
@@ -9360,7 +9360,7 @@
       <trans-unit id="a1c3bbe023ec149af9ca57351a03532f25d9c475" resname="admin::users: api ID">
         <source>admin::users: api ID</source>
         <target state="translated">API ID</target>
-        <jms:reference-file line="633">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="642">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="e12b10eeccf3c4f722e66750eaa2886573a6b803" resname="admin::users: api list">
         <source>admin::users: api list</source>
@@ -9370,27 +9370,27 @@
       <trans-unit id="1f92b414f86ee855323c7d9ffba61c091ebea92f" resname="admin::users: api oauth code list">
         <source>admin::users: api oauth code list</source>
         <target state="translated">Oauth requests</target>
-        <jms:reference-file line="659">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="668">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="fc7984833e39797984814936ab510cfd4080bc18" resname="admin::users: auth failure locked list">
         <source>admin::users: auth failure locked list</source>
         <target state="translated">auth failure locked</target>
-        <jms:reference-file line="690">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="699">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="a7cc508c7cb0f9b1d27e69e9a422670183236ec5" resname="admin::users: auth failure unlocked list">
         <source>admin::users: auth failure unlocked list</source>
         <target state="translated">Auth failure history (2 months retention )</target>
-        <jms:reference-file line="717">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="726">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="333dc596de24529211ed2966582e8aae28b72238" resname="admin::users: creation date">
         <source>admin::users: creation date</source>
         <target state="translated">Creation date</target>
         <jms:reference-file line="18">web/admin/auth-failure.html.twig</jms:reference-file>
-        <jms:reference-file line="601">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="634">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="667">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="696">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="723">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="610">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="643">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="676">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="705">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="732">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="c767eb6f0297cbffa3fa9591dc197542c96a8bae" resname="admin::users: delete auth failure">
         <source>admin::users: delete auth failure</source>
@@ -9400,7 +9400,7 @@
       <trans-unit id="e2d00e6f420c23a8910d8c20a4a938cac197bb8e" resname="admin::users: distance_id">
         <source>admin::users: distance_id</source>
         <target state="translated">IDP Id</target>
-        <jms:reference-file line="600">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="609">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="e7ab6de2942a61fb7b79f5f4b4e3d95db0fe528f" resname="admin::users: erase auth failure table">
         <source>admin::users: erase auth failure table</source>
@@ -9410,24 +9410,24 @@
       <trans-unit id="8e47404e0029c675581606660cbe525ff1f9c749" resname="admin::users: grant password info">
         <source>admin::users: grant password info</source>
         <target state="translated">Password Granted</target>
-        <jms:reference-file line="637">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="646">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="3fc5e0916ce91a50c260f25b88bcc5e36b089210" resname="admin::users: ip">
         <source>admin::users: ip</source>
         <target state="translated">Ip adress</target>
         <jms:reference-file line="16">web/admin/auth-failure.html.twig</jms:reference-file>
-        <jms:reference-file line="695">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="722">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="704">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="731">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="b334c6f1e8ef850c8b78d860550e66bbd5a299e9" resname="admin::users: list user api application">
         <source>admin::users: list user api application</source>
         <target state="translated">API application</target>
-        <jms:reference-file line="620">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="629">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="496a4f6a90f31903c0220ff8cee21bf75a473c4f" resname="admin::users: list user providers">
         <source>admin::users: list user providers</source>
         <target state="translated">Auth Provider</target>
-        <jms:reference-file line="596">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="605">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="4344a147edb8f171db16fa1916addea8d5ebde19" resname="admin::users: locked">
         <source>admin::users: locked</source>
@@ -9437,72 +9437,72 @@
       <trans-unit id="e76893b673dcca93abf91a13f24e586b7f399823" resname="admin::users: modification date">
         <source>admin::users: modification date</source>
         <target state="translated">Modification date</target>
-        <jms:reference-file line="602">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="635">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="611">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="644">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="0a71173381c1c8b659c9f7ac05cd5dfed8d3b97e" resname="admin::users: no api defined for this user">
         <source>admin::users: no api defined for this user</source>
         <target state="translated">No API for this user</target>
-        <jms:reference-file line="654">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="663">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="85d760f5a5e3b7c29f17485512d9225ccdd40811" resname="admin::users: password granted">
         <source>admin::users: password granted</source>
         <target state="translated">Yes</target>
         <jms:reference-file line="107">admin/inspector/record-index.html.twig</jms:reference-file>
-        <jms:reference-file line="638">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="647">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="74411bbacf01ba76709c7cf0135e7c4aeed0c180" resname="admin::users: password not granted">
         <source>admin::users: password not granted</source>
         <target state="translated">No</target>
         <jms:reference-file line="109">admin/inspector/record-index.html.twig</jms:reference-file>
-        <jms:reference-file line="638">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="647">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="3c6e9df1925ca0ae9df114b4c17e7667ec66f5d7" resname="admin::users: provider">
         <source>admin::users: provider</source>
         <target state="translated">Auth provider</target>
-        <jms:reference-file line="599">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="608">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="6cfb4576a83ebc4343a74a84024777119fadbd25" resname="admin::users: redirect uri">
         <source>admin::users: redirect uri</source>
         <target state="translated">Redirect uri</target>
-        <jms:reference-file line="665">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="674">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="af5cd4f04496cdfefe14ae0737a3a9ea175203a9" resname="admin::users: reset auth failure">
         <source>admin::users: reset auth failure</source>
         <target state="translated">Reset auth failures counter</target>
-        <jms:reference-file line="710">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="719">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="4bba269c4ff3ce66aed91e3da5d9ecc27eb46de1" resname="admin::users: scope">
         <source>admin::users: scope</source>
         <target state="translated">Scope</target>
-        <jms:reference-file line="666">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="675">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="e6ca0a61942f216df1672e612b4e27fdbf498ca2" resname="admin::users: type info">
         <source>admin::users: type info</source>
         <target state="translated">Application Type</target>
-        <jms:reference-file line="640">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="649">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="fe2cdf3da09f988f7531c1a794f9754fdcfaa00e" resname="admin::users: user api use">
         <source>admin::users: user api use</source>
         <target state="translated">Used</target>
-        <jms:reference-file line="630">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="639">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="54592d34674af3046462e72065524cdc0c7352a1" resname="admin::users: username">
         <source>admin::users: username</source>
         <target state="translated">Username</target>
         <jms:reference-file line="15">web/admin/auth-failure.html.twig</jms:reference-file>
-        <jms:reference-file line="694">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="721">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="703">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="730">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="6677c212551cdee298546dbe82fa8bdfa6c2e51c" resname="admin::users: webhook activation">
         <source>admin::users: webhook activation</source>
         <target state="translated">Webhook activation</target>
-        <jms:reference-file line="644">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="653">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="77b1da0932d4748877dc55b8321a96460a7e8ab0" resname="admin::users: webhook url">
         <source>admin::users: webhook url</source>
         <target state="translated">Webhook URL</target>
-        <jms:reference-file line="641">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="650">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="68a6b3e4f84d0b990bb8da26132116dc6185d5ce" resname="admin::users:edit: Manage inline selection" approved="yes">
         <source>admin::users:edit: Manage inline selection</source>
@@ -10064,9 +10064,9 @@
         <target state="translated">Display Expose Service in Production</target>
         <jms:reference-file line="29">PhraseanetService/Form/PSExposeConfigurationType.php</jms:reference-file>
       </trans-unit>
-      <trans-unit id="83403d4291975d8f707f1a24554617ed711143d0" resname="admin:phrasea-service-setting:tab:expose:: auth provider name with type ps-auth">
-        <source>admin:phrasea-service-setting:tab:expose:: auth provider name with type ps-auth</source>
-        <target state="translated">Auth provider name with type ps-auth</target>
+      <trans-unit id="e247d6ed88683925b4f13f7cc2c4d6b97d1efa9e" resname="admin:phrasea-service-setting:tab:expose:: auth provider name with type openid">
+        <source>admin:phrasea-service-setting:tab:expose:: auth provider name with type openid</source>
+        <target state="new">admin:phrasea-service-setting:tab:expose:: auth provider name with type openid</target>
         <jms:reference-file line="48">PhraseanetService/Form/PSExposeConnectionType.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="efcf63b34a4b02de67804c139282d1c5d3d05b0b" resname="admin:phrasea-service-setting:tab:expose:: verify ssl">
@@ -10503,7 +10503,7 @@
         <jms:reference-file line="25">Bridge/Dailymotion/playlist_createcontainer.html.twig</jms:reference-file>
         <jms:reference-file line="44">admin/collection/details.html.twig</jms:reference-file>
         <jms:reference-file line="223">admin/publications/fiche.html.twig</jms:reference-file>
-        <jms:reference-file line="859">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="868">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="50">user/import/file.html.twig</jms:reference-file>
         <jms:reference-file line="69">admin/databox/details.html.twig</jms:reference-file>
         <jms:reference-file line="163">admin/statusbit/edit.html.twig</jms:reference-file>
@@ -10617,7 +10617,7 @@
         <jms:reference-file line="128">admin/publications/fiche.html.twig</jms:reference-file>
         <jms:reference-file line="45">admin/publications/list.html.twig</jms:reference-file>
         <jms:reference-file line="415">web/admin/subdefs.html.twig</jms:reference-file>
-        <jms:reference-file line="858">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="867">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="83">web/admin/setup.html.twig</jms:reference-file>
         <jms:reference-file line="34">web/admin/structure.html.twig</jms:reference-file>
         <jms:reference-file line="117">web/admin/dashboard.html.twig</jms:reference-file>
@@ -10651,13 +10651,13 @@
         <target state="translated">All Databox</target>
         <jms:reference-file line="47">admin/worker-manager/worker_info.html.twig</jms:reference-file>
         <jms:reference-file line="22">admin/inspector/record-index.html.twig</jms:reference-file>
-        <jms:reference-file line="748">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="825">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="757">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="834">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="f013ff9e62d4ae563de3270b3297f9da2afefcc9" resname="button::choose type">
         <source>button::choose type</source>
         <target state="translated">Choose type</target>
-        <jms:reference-file line="755">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="764">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="1dd4da0afbec8df77d3124368070a28fa3fc8960" resname="button::no">
         <source>button::no</source>
@@ -11727,18 +11727,18 @@
       <trans-unit id="8af68da04218b6188405e5f7422866b5412ec7a8" resname="login::erreur: Erreur d'authentification" approved="yes">
         <source>login::erreur: Erreur d'authentification</source>
         <target state="translated">Authentication error</target>
-        <jms:reference-file line="863">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="861">Controller/Root/LoginController.php</jms:reference-file>
         <jms:reference-file line="103">Controller/Api/OAuth2Controller.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="e7678ea875773920bf91f79b62b97f31986f211b" resname="login::erreur: No available connection - Please contact sys-admin" approved="yes">
         <source>login::erreur: No available connection - Please contact sys-admin</source>
         <target state="translated">No available connection.  Please contact system administrator</target>
-        <jms:reference-file line="555">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="553">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="dcc7f0cac10852ef9bcc7f10019e2679174e3df7" resname="login::erreur: Vous n'avez pas confirme votre email" approved="yes">
         <source>login::erreur: Vous n'avez pas confirme votre email</source>
         <target state="translated">Access denied, you have not confirmed your e-mail address.</target>
-        <jms:reference-file line="856">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="854">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="5cdbff50d2a3ae92720c5af32d4cd560d1351a91" resname="login::notification: Changements enregistres" approved="yes">
         <source>login::notification: Changements enregistres</source>
@@ -11787,12 +11787,12 @@
       <trans-unit id="ace8a8481cf18b9b69c30aa34a65135ed2d75277" resname="login::register:email: Vous avez ete accepte sur les collections suivantes : " approved="yes">
         <source>login::register:email: Vous avez ete accepte sur les collections suivantes :</source>
         <target state="translated">Your access has been granted on these bases and collections:</target>
-        <jms:reference-file line="672">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="680">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="20fc11d974588d0abed50d717ed3174eff70ac83" resname="login::register:email: Vous avez ete refuse sur les collections suivantes : " approved="yes">
         <source>login::register:email: Vous avez ete refuse sur les collections suivantes :</source>
         <target state="translated">Your access has been denied to the following databases and collections:</target>
-        <jms:reference-file line="675">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="683">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="ea4440bd94714e4e85334618405679ae2e36f4f1" resname="mai" approved="yes">
         <source>mai</source>
diff --git a/resources/locales/messages.fr.xlf b/resources/locales/messages.fr.xlf
index f0bd245974..c6b4a5c168 100644
--- a/resources/locales/messages.fr.xlf
+++ b/resources/locales/messages.fr.xlf
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <xliff xmlns="urn:oasis:names:tc:xliff:document:1.2" xmlns:jms="urn:jms:translation" version="1.2">
-  <file date="2024-04-17T13:05:24Z" source-language="en" target-language="fr" datatype="plaintext" original="not.available">
+  <file date="2024-04-18T08:41:27Z" source-language="en" target-language="fr" datatype="plaintext" original="not.available">
     <header>
       <tool tool-id="JMSTranslationBundle" tool-name="JMSTranslationBundle" tool-version="1.1.0-DEV"/>
       <note>The source node in most cases contains the sample message as written by the developer. If it looks like a dot-delimitted string such as "form.label.firstname", then the developer has not provided a default message.</note>
@@ -1098,7 +1098,7 @@
       <trans-unit id="a45ff91e0c1ebb94d62f5daaad1e708278ba484e" resname="An unexpected error occurred during authentication process, please contact an admin" approved="yes">
         <source>An unexpected error occurred during authentication process, please contact an admin</source>
         <target state="translated">Une erreur est survenue lors de l'authentification. Veuillez contacter un Administrateur</target>
-        <jms:reference-file line="833">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="831">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="2063ba5ce348f48f77284c961f2291da1fdd79a5" resname="An upload on %bridge_adapter% failed, the resaon is : %reason%" approved="yes">
         <source>An upload on %bridge_adapter% failed, the resaon is : %reason%</source>
@@ -1243,7 +1243,7 @@
       <trans-unit id="927aacfc684a0654a9fc301f52ed3f2441adb363" resname="Are you sure you want to reset rights?" approved="yes">
         <source>Are you sure you want to reset rights?</source>
         <target state="translated">Etes-vous sûr de vouloir réinitialiser les droits ?</target>
-        <jms:reference-file line="1392">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="1401">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="74e0b9c80dca267a78a89ad68a2f6c73241b5973" resname="Attention" approved="yes">
         <source>Attention</source>
@@ -2811,7 +2811,7 @@
       <trans-unit id="4492ab77c9378c5582b87621ecd89c96fef88640" resname="Email '%email%' for login '%login%' already exists in database" approved="yes">
         <source>Email '%email%' for login '%login%' already exists in database</source>
         <target state="translated">L'adresse e-mail '%email%' pour l'identifiant '%login%' existe déjà dans la base</target>
-        <jms:reference-file line="806">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="814">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="e4aaac273d3c0d793207e6b559a7b7f97d543064" resname="Email Name" approved="yes">
         <source>Email Name</source>
@@ -4246,17 +4246,17 @@
       <trans-unit id="950c019b3fdf4ee87547ab457330c0f003fdec4b" resname="Login %login% already exists in database" approved="yes">
         <source>Login %login% already exists in database</source>
         <target state="translated">L'identifiant %login% existe déjà dans la base de données</target>
-        <jms:reference-file line="790">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="798">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="092417444255d19227b90cb8b6a31eb531c3e045" resname="Login %login% is already defined in the file at line %line%" approved="yes">
         <source>Login %login% is already defined in the file at line %line%</source>
         <target state="translated">L'identifiant %login% est déjà mentionné dans le fichier à la ligne %line%</target>
-        <jms:reference-file line="784">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="792">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="01a1b17937851d24fabec72d491bfe7693dcbeb5" resname="Login line %line% is empty" approved="yes">
         <source>Login line %line% is empty</source>
         <target state="translated">L'identifiant n'est pas renseigné à la ligne %line%</target>
-        <jms:reference-file line="782">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="790">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="9a839961790bd116cb1d19dd249a0f68170ea33d" resname="Login to link your account" approved="yes">
         <source>Login to link your account</source>
@@ -4278,7 +4278,7 @@
       <trans-unit id="c176d759339c846576bc2937aab7e01f5404e4e3" resname="Mail line %line% is empty" approved="yes">
         <source>Mail line %line% is empty</source>
         <target state="translated">L'adresse e-mail n'est pas renseignée à la ligne %line%</target>
-        <jms:reference-file line="804">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="812">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="fdb9efd7a759711741fc699549c92e54c664e38c" resname="Mail sent" approved="yes">
         <source>Mail sent</source>
@@ -4988,7 +4988,7 @@
       <trans-unit id="6e77cc0549ad99a9d3ba5c384f7f329db24d6d0c" resname="Password is empty at line %line%" approved="yes">
         <source>Password is empty at line %line%</source>
         <target state="translated">Le mot de passe est vide à la ligne %line%</target>
-        <jms:reference-file line="819">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="827">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="d8be7287e7454f5c5ed0f570424a959724db8d9b" resname="Past year" approved="yes">
         <source>Past year</source>
@@ -5054,7 +5054,7 @@
       <trans-unit id="17d47194ec888edc3eb2a8f200f0400f787924ff" resname="Phraseanet guest-access is disabled" approved="yes">
         <source>Phraseanet guest-access is disabled</source>
         <target state="translated">L'accès invité de Phraseanet est désactivé.</target>
-        <jms:reference-file line="596">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="594">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="f76e81b1e826c0255a8e7e2b0e9c8f6c33bba34c" resname="Phraseanet may require many binaries." approved="yes">
         <source>Phraseanet may require many binaries.</source>
@@ -7078,7 +7078,7 @@
       <trans-unit id="a5d2dca08b69ce907e38ed1bf35fc219df18edb3" resname="Unable to authenticate with %provider_name%" approved="yes">
         <source>Unable to authenticate with %provider_name%</source>
         <target state="translated">Impossible de s'authentifier avec %provider_name%</target>
-        <jms:reference-file line="726">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="724">Controller/Root/LoginController.php</jms:reference-file>
         <jms:reference-file line="217">Controller/Api/OAuth2Controller.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="7adcfb8dcac6fb17a9283fcb6b53f1e31ca2f3a0" resname="Unable to connect to MySQL server" approved="yes">
@@ -7096,12 +7096,12 @@
       <trans-unit id="225f62661868b2c3fb3820c94c5727f70b1e7d4c" resname="Unable to create template, the name is already used." approved="yes">
         <source>Unable to create template, the name is already used.</source>
         <target state="translated">Impossible le créer le modèle, le nom donné est déjà utilisé.</target>
-        <jms:reference-file line="403">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="411">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="ac9cb56f58dc3e077f9557ed6958e993dae09e71" resname="Unable to create the user." approved="yes">
         <source>Unable to create the user.</source>
         <target state="translated">Impossible de créer l'utilisateur.</target>
-        <jms:reference-file line="405">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="413">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="5660d6aac90c7a8f4df9fcad68513c061bef3298" resname="Unable to delete list" approved="yes">
         <source>Unable to delete list</source>
@@ -7121,7 +7121,7 @@
       <trans-unit id="c8cfcd74a9813267d93550c9cf1d2930f23815f0" resname="Unable to retrieve provider identity" approved="yes">
         <source>Unable to retrieve provider identity</source>
         <target state="translated">Impossible de récupérer l'identité auprès du fournisseur.</target>
-        <jms:reference-file line="749">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="747">Controller/Root/LoginController.php</jms:reference-file>
         <jms:reference-file line="234">Controller/Api/OAuth2Controller.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="6af8293be2ccc7fc664c96b11293a226fd300026" resname="Unable to send the documents" approved="yes">
@@ -7341,7 +7341,7 @@
       <trans-unit id="01cb944f89ac99378a7b2fa31bec677774328456" resname="User's publications in feeds">
         <source>User's publications in feeds</source>
         <target state="translated">Publication(s) de l'utilisateur</target>
-        <jms:reference-file line="805">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="814">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="57f2b181d0a5e79a147ea1cdf41457f58dbbb3c9" resname="Users" approved="yes">
         <source>Users</source>
@@ -7576,7 +7576,7 @@
       <trans-unit id="0d3d97ffc6b526aad5b5c5e4f99df4298a48ce0b" resname="Vous etes maintenant deconnecte. A bientot." approved="yes">
         <source>Vous etes maintenant deconnecte. A bientot.</source>
         <target state="translated">Vous êtes maintenant déconnecté. A bientôt.</target>
-        <jms:reference-file line="532">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="530">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="2b31652d33be49a2d9d3187a0c31719a1c834f18" resname="Vous n'avez pas assez de droits sur certains elements selectionnes" approved="yes">
         <source>Vous n'avez pas assez de droits sur certains elements selectionnes</source>
@@ -7995,7 +7995,7 @@
       <trans-unit id="ff2e2369a8f0959a7f665f926ec4d84b3c5a46f5" resname="Your identity is not recognized." approved="yes">
         <source>Your identity is not recognized.</source>
         <target state="translated">Votre identité n'est pas reconnue.</target>
-        <jms:reference-file line="790">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="788">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="aaf57216976f942ee7fe118918b2b8893bde955f" resname="Your install might need to build some sub-definitions" approved="yes">
         <source>Your install might need to build some sub-definitions</source>
@@ -8187,7 +8187,7 @@
       <trans-unit id="3c26ea0c44c762e63aa75169b15a670e3fdc1e97" resname="admin :users: user owned api">
         <source>admin :users: user owned api</source>
         <target state="translated">Propriétaire</target>
-        <jms:reference-file line="628">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="637">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="3255d759dad94eb721100214aa939ff692a4c2cd" resname="admin:: La collection n'a pas ete creee : vous devez donner un nom a votre collection" approved="yes">
         <source>admin:: La collection n'a pas ete creee : vous devez donner un nom a votre collection</source>
@@ -8609,7 +8609,7 @@
         <source>admin::compte-utilisateur activite</source>
         <target state="translated">Activité</target>
         <jms:reference-file line="104">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="444">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="452">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="558">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="221">admin/user/registrations.html.twig</jms:reference-file>
         <jms:reference-file line="122">web/account/account.html.twig</jms:reference-file>
@@ -8618,7 +8618,7 @@
         <source>admin::compte-utilisateur adresse</source>
         <target state="translated">Adresse</target>
         <jms:reference-file line="69">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="436">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="444">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="414">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="517">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="225">admin/user/registrations.html.twig</jms:reference-file>
@@ -8633,7 +8633,7 @@
         <source>admin::compte-utilisateur code postal</source>
         <target state="translated">Code postal</target>
         <jms:reference-file line="76">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="438">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="446">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="421">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="525">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="94">web/account/account.html.twig</jms:reference-file>
@@ -8663,7 +8663,7 @@
         <source>admin::compte-utilisateur email</source>
         <target state="translated">E-mail</target>
         <jms:reference-file line="117">Event/Subscriber/RegistrationSubscriber.php</jms:reference-file>
-        <jms:reference-file line="433">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="441">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="361">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="151">web/admin/users.html.twig</jms:reference-file>
         <jms:reference-file line="22">web/admin/connected-users.html.twig</jms:reference-file>
@@ -8675,7 +8675,7 @@
         <source>admin::compte-utilisateur fax</source>
         <target state="translated">Fax</target>
         <jms:reference-file line="118">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="441">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="449">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="575">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="136">web/account/account.html.twig</jms:reference-file>
       </trans-unit>
@@ -8711,7 +8711,7 @@
         <target state="translated">Nom</target>
         <jms:reference-file line="62">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
         <jms:reference-file line="115">Event/Subscriber/RegistrationSubscriber.php</jms:reference-file>
-        <jms:reference-file line="431">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="439">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="379">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="13">web/admin/connected-users.html.twig</jms:reference-file>
         <jms:reference-file line="501">web/admin/editusers.html.twig</jms:reference-file>
@@ -8726,14 +8726,14 @@
       <trans-unit id="1b83f90c602146fc09f3e025507c9b11aa10772a" resname="admin::compte-utilisateur pays" approved="yes">
         <source>admin::compte-utilisateur pays</source>
         <target state="translated">Pays</target>
-        <jms:reference-file line="439">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="447">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="156">web/admin/users.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="28c517ddecdb662c767290d2e1fa53ef198307fa" resname="admin::compte-utilisateur poste" approved="yes">
         <source>admin::compte-utilisateur poste</source>
         <target state="translated">Poste</target>
         <jms:reference-file line="90">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="442">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="450">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="407">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="542">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="219">admin/user/registrations.html.twig</jms:reference-file>
@@ -8744,7 +8744,7 @@
         <target state="translated">Prénom</target>
         <jms:reference-file line="55">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
         <jms:reference-file line="116">Event/Subscriber/RegistrationSubscriber.php</jms:reference-file>
-        <jms:reference-file line="432">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="440">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="386">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="493">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="213">admin/user/registrations.html.twig</jms:reference-file>
@@ -8761,7 +8761,7 @@
         <source>admin::compte-utilisateur societe</source>
         <target state="translated">Société</target>
         <jms:reference-file line="97">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="443">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="451">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="400">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="146">web/admin/users.html.twig</jms:reference-file>
         <jms:reference-file line="16">web/admin/connected-users.html.twig</jms:reference-file>
@@ -8777,7 +8777,7 @@
       <trans-unit id="aa3ffb658796d685813791430da4efdac145b8d9" resname="admin::compte-utilisateur telephone" approved="yes">
         <source>admin::compte-utilisateur telephone</source>
         <target state="translated">Téléphone</target>
-        <jms:reference-file line="440">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="448">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="393">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="19">web/admin/connected-users.html.twig</jms:reference-file>
         <jms:reference-file line="567">web/admin/editusers.html.twig</jms:reference-file>
@@ -8793,7 +8793,7 @@
         <source>admin::compte-utilisateur ville</source>
         <target state="translated">Ville</target>
         <jms:reference-file line="83">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="437">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="445">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="428">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="533">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="101">web/account/account.html.twig</jms:reference-file>
@@ -9344,12 +9344,12 @@ Si vous recevez cet e-mail sans l'avoir sollicité, merci de l'ignorer ou de le
       <trans-unit id="382c04ad6bd750ac249b38f17889d00baed79984" resname="admin::users: Api id">
         <source>admin::users: Api id</source>
         <target state="translated">Id</target>
-        <jms:reference-file line="663">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="672">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="f2cfa8b40f83359062cca1806e40e189c001b404" resname="admin::users: Api name">
         <source>admin::users: Api name</source>
         <target state="translated">Nom</target>
-        <jms:reference-file line="664">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="673">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="b7c39510d9e25cf5af8c360cce029ffa1dc2ef88" resname="admin::users: Auth failure">
         <source>admin::users: Auth failure</source>
@@ -9359,7 +9359,7 @@ Si vous recevez cet e-mail sans l'avoir sollicité, merci de l'ignorer ou de le
       <trans-unit id="a1c3bbe023ec149af9ca57351a03532f25d9c475" resname="admin::users: api ID">
         <source>admin::users: api ID</source>
         <target state="translated">API ID</target>
-        <jms:reference-file line="633">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="642">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="e12b10eeccf3c4f722e66750eaa2886573a6b803" resname="admin::users: api list">
         <source>admin::users: api list</source>
@@ -9369,27 +9369,27 @@ Si vous recevez cet e-mail sans l'avoir sollicité, merci de l'ignorer ou de le
       <trans-unit id="1f92b414f86ee855323c7d9ffba61c091ebea92f" resname="admin::users: api oauth code list">
         <source>admin::users: api oauth code list</source>
         <target state="translated">Requêtes Oauth</target>
-        <jms:reference-file line="659">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="668">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="fc7984833e39797984814936ab510cfd4080bc18" resname="admin::users: auth failure locked list">
         <source>admin::users: auth failure locked list</source>
         <target state="translated">Echecs d'authentification</target>
-        <jms:reference-file line="690">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="699">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="a7cc508c7cb0f9b1d27e69e9a422670183236ec5" resname="admin::users: auth failure unlocked list">
         <source>admin::users: auth failure unlocked list</source>
         <target state="translated">Historique des échecs d'authentification (2 derniers mois)</target>
-        <jms:reference-file line="717">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="726">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="333dc596de24529211ed2966582e8aae28b72238" resname="admin::users: creation date">
         <source>admin::users: creation date</source>
         <target state="translated">Date de création</target>
         <jms:reference-file line="18">web/admin/auth-failure.html.twig</jms:reference-file>
-        <jms:reference-file line="601">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="634">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="667">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="696">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="723">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="610">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="643">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="676">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="705">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="732">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="c767eb6f0297cbffa3fa9591dc197542c96a8bae" resname="admin::users: delete auth failure">
         <source>admin::users: delete auth failure</source>
@@ -9399,7 +9399,7 @@ Si vous recevez cet e-mail sans l'avoir sollicité, merci de l'ignorer ou de le
       <trans-unit id="e2d00e6f420c23a8910d8c20a4a938cac197bb8e" resname="admin::users: distance_id">
         <source>admin::users: distance_id</source>
         <target state="translated">IDP Id</target>
-        <jms:reference-file line="600">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="609">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="e7ab6de2942a61fb7b79f5f4b4e3d95db0fe528f" resname="admin::users: erase auth failure table">
         <source>admin::users: erase auth failure table</source>
@@ -9409,24 +9409,24 @@ Si vous recevez cet e-mail sans l'avoir sollicité, merci de l'ignorer ou de le
       <trans-unit id="8e47404e0029c675581606660cbe525ff1f9c749" resname="admin::users: grant password info">
         <source>admin::users: grant password info</source>
         <target state="translated">Password Granted</target>
-        <jms:reference-file line="637">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="646">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="3fc5e0916ce91a50c260f25b88bcc5e36b089210" resname="admin::users: ip">
         <source>admin::users: ip</source>
         <target state="translated">Adresse IP</target>
         <jms:reference-file line="16">web/admin/auth-failure.html.twig</jms:reference-file>
-        <jms:reference-file line="695">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="722">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="704">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="731">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="b334c6f1e8ef850c8b78d860550e66bbd5a299e9" resname="admin::users: list user api application">
         <source>admin::users: list user api application</source>
         <target state="translated">Application API</target>
-        <jms:reference-file line="620">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="629">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="496a4f6a90f31903c0220ff8cee21bf75a473c4f" resname="admin::users: list user providers">
         <source>admin::users: list user providers</source>
         <target state="translated">Auth Provider</target>
-        <jms:reference-file line="596">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="605">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="4344a147edb8f171db16fa1916addea8d5ebde19" resname="admin::users: locked">
         <source>admin::users: locked</source>
@@ -9436,72 +9436,72 @@ Si vous recevez cet e-mail sans l'avoir sollicité, merci de l'ignorer ou de le
       <trans-unit id="e76893b673dcca93abf91a13f24e586b7f399823" resname="admin::users: modification date">
         <source>admin::users: modification date</source>
         <target state="translated">Date de modification</target>
-        <jms:reference-file line="602">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="635">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="611">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="644">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="0a71173381c1c8b659c9f7ac05cd5dfed8d3b97e" resname="admin::users: no api defined for this user">
         <source>admin::users: no api defined for this user</source>
         <target state="translated">Aucune API pour cet utilisateur</target>
-        <jms:reference-file line="654">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="663">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="85d760f5a5e3b7c29f17485512d9225ccdd40811" resname="admin::users: password granted">
         <source>admin::users: password granted</source>
         <target state="translated">Oui</target>
         <jms:reference-file line="107">admin/inspector/record-index.html.twig</jms:reference-file>
-        <jms:reference-file line="638">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="647">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="74411bbacf01ba76709c7cf0135e7c4aeed0c180" resname="admin::users: password not granted">
         <source>admin::users: password not granted</source>
         <target state="translated">Non</target>
         <jms:reference-file line="109">admin/inspector/record-index.html.twig</jms:reference-file>
-        <jms:reference-file line="638">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="647">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="3c6e9df1925ca0ae9df114b4c17e7667ec66f5d7" resname="admin::users: provider">
         <source>admin::users: provider</source>
         <target state="translated">Auth provider</target>
-        <jms:reference-file line="599">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="608">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="6cfb4576a83ebc4343a74a84024777119fadbd25" resname="admin::users: redirect uri">
         <source>admin::users: redirect uri</source>
         <target state="translated">Uri de redirection</target>
-        <jms:reference-file line="665">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="674">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="af5cd4f04496cdfefe14ae0737a3a9ea175203a9" resname="admin::users: reset auth failure">
         <source>admin::users: reset auth failure</source>
         <target state="translated">RAZ du compteur d'échec</target>
-        <jms:reference-file line="710">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="719">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="4bba269c4ff3ce66aed91e3da5d9ecc27eb46de1" resname="admin::users: scope">
         <source>admin::users: scope</source>
         <target state="translated">Scope</target>
-        <jms:reference-file line="666">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="675">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="e6ca0a61942f216df1672e612b4e27fdbf498ca2" resname="admin::users: type info">
         <source>admin::users: type info</source>
         <target state="translated">Type de l'application</target>
-        <jms:reference-file line="640">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="649">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="fe2cdf3da09f988f7531c1a794f9754fdcfaa00e" resname="admin::users: user api use">
         <source>admin::users: user api use</source>
         <target state="translated">Utilisée</target>
-        <jms:reference-file line="630">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="639">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="54592d34674af3046462e72065524cdc0c7352a1" resname="admin::users: username">
         <source>admin::users: username</source>
         <target state="translated">Nom d'utilisateur</target>
         <jms:reference-file line="15">web/admin/auth-failure.html.twig</jms:reference-file>
-        <jms:reference-file line="694">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="721">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="703">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="730">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="6677c212551cdee298546dbe82fa8bdfa6c2e51c" resname="admin::users: webhook activation">
         <source>admin::users: webhook activation</source>
         <target state="translated">Webhook activation</target>
-        <jms:reference-file line="644">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="653">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="77b1da0932d4748877dc55b8321a96460a7e8ab0" resname="admin::users: webhook url">
         <source>admin::users: webhook url</source>
         <target state="translated">Webhook URL</target>
-        <jms:reference-file line="641">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="650">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="68a6b3e4f84d0b990bb8da26132116dc6185d5ce" resname="admin::users:edit: Manage inline selection" approved="yes">
         <source>admin::users:edit: Manage inline selection</source>
@@ -10063,9 +10063,9 @@ Si vous recevez cet e-mail sans l'avoir sollicité, merci de l'ignorer ou de le
         <target state="translated">Activer Expose Service dans Production</target>
         <jms:reference-file line="29">PhraseanetService/Form/PSExposeConfigurationType.php</jms:reference-file>
       </trans-unit>
-      <trans-unit id="83403d4291975d8f707f1a24554617ed711143d0" resname="admin:phrasea-service-setting:tab:expose:: auth provider name with type ps-auth">
-        <source>admin:phrasea-service-setting:tab:expose:: auth provider name with type ps-auth</source>
-        <target state="translated">Nom du Auth provider de type ps-auth</target>
+      <trans-unit id="e247d6ed88683925b4f13f7cc2c4d6b97d1efa9e" resname="admin:phrasea-service-setting:tab:expose:: auth provider name with type openid">
+        <source>admin:phrasea-service-setting:tab:expose:: auth provider name with type openid</source>
+        <target state="new">admin:phrasea-service-setting:tab:expose:: auth provider name with type openid</target>
         <jms:reference-file line="48">PhraseanetService/Form/PSExposeConnectionType.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="efcf63b34a4b02de67804c139282d1c5d3d05b0b" resname="admin:phrasea-service-setting:tab:expose:: verify ssl">
@@ -10502,7 +10502,7 @@ Si vous recevez cet e-mail sans l'avoir sollicité, merci de l'ignorer ou de le
         <jms:reference-file line="25">Bridge/Dailymotion/playlist_createcontainer.html.twig</jms:reference-file>
         <jms:reference-file line="44">admin/collection/details.html.twig</jms:reference-file>
         <jms:reference-file line="223">admin/publications/fiche.html.twig</jms:reference-file>
-        <jms:reference-file line="859">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="868">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="50">user/import/file.html.twig</jms:reference-file>
         <jms:reference-file line="69">admin/databox/details.html.twig</jms:reference-file>
         <jms:reference-file line="163">admin/statusbit/edit.html.twig</jms:reference-file>
@@ -10616,7 +10616,7 @@ Si vous recevez cet e-mail sans l'avoir sollicité, merci de l'ignorer ou de le
         <jms:reference-file line="128">admin/publications/fiche.html.twig</jms:reference-file>
         <jms:reference-file line="45">admin/publications/list.html.twig</jms:reference-file>
         <jms:reference-file line="415">web/admin/subdefs.html.twig</jms:reference-file>
-        <jms:reference-file line="858">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="867">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="83">web/admin/setup.html.twig</jms:reference-file>
         <jms:reference-file line="34">web/admin/structure.html.twig</jms:reference-file>
         <jms:reference-file line="117">web/admin/dashboard.html.twig</jms:reference-file>
@@ -10650,13 +10650,13 @@ Si vous recevez cet e-mail sans l'avoir sollicité, merci de l'ignorer ou de le
         <target state="translated">Toutes les Databox</target>
         <jms:reference-file line="47">admin/worker-manager/worker_info.html.twig</jms:reference-file>
         <jms:reference-file line="22">admin/inspector/record-index.html.twig</jms:reference-file>
-        <jms:reference-file line="748">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="825">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="757">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="834">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="f013ff9e62d4ae563de3270b3297f9da2afefcc9" resname="button::choose type">
         <source>button::choose type</source>
         <target state="translated">Choisir le type</target>
-        <jms:reference-file line="755">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="764">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="1dd4da0afbec8df77d3124368070a28fa3fc8960" resname="button::no">
         <source>button::no</source>
@@ -11726,18 +11726,18 @@ Si vous recevez cet e-mail sans l'avoir sollicité, merci de l'ignorer ou de le
       <trans-unit id="8af68da04218b6188405e5f7422866b5412ec7a8" resname="login::erreur: Erreur d'authentification" approved="yes">
         <source>login::erreur: Erreur d'authentification</source>
         <target state="translated">Erreur d'authentification</target>
-        <jms:reference-file line="863">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="861">Controller/Root/LoginController.php</jms:reference-file>
         <jms:reference-file line="103">Controller/Api/OAuth2Controller.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="e7678ea875773920bf91f79b62b97f31986f211b" resname="login::erreur: No available connection - Please contact sys-admin" approved="yes">
         <source>login::erreur: No available connection - Please contact sys-admin</source>
         <target state="translated">Connexion impossible, contactez un administrateur système</target>
-        <jms:reference-file line="555">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="553">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="dcc7f0cac10852ef9bcc7f10019e2679174e3df7" resname="login::erreur: Vous n'avez pas confirme votre email" approved="yes">
         <source>login::erreur: Vous n'avez pas confirme votre email</source>
         <target state="translated">Accès impossible, vous n'avez pas confirmé votre adresse e-mail.</target>
-        <jms:reference-file line="856">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="854">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="5cdbff50d2a3ae92720c5af32d4cd560d1351a91" resname="login::notification: Changements enregistres" approved="yes">
         <source>login::notification: Changements enregistres</source>
@@ -11786,12 +11786,12 @@ Si vous recevez cet e-mail sans l'avoir sollicité, merci de l'ignorer ou de le
       <trans-unit id="ace8a8481cf18b9b69c30aa34a65135ed2d75277" resname="login::register:email: Vous avez ete accepte sur les collections suivantes : " approved="yes">
         <source>login::register:email: Vous avez ete accepte sur les collections suivantes :</source>
         <target state="translated">Votre accès a été validé pour les collections suivantes :</target>
-        <jms:reference-file line="672">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="680">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="20fc11d974588d0abed50d717ed3174eff70ac83" resname="login::register:email: Vous avez ete refuse sur les collections suivantes : " approved="yes">
         <source>login::register:email: Vous avez ete refuse sur les collections suivantes :</source>
         <target state="translated">Votre accès a été refusé pour les collections suivantes :</target>
-        <jms:reference-file line="675">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="683">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="ea4440bd94714e4e85334618405679ae2e36f4f1" resname="mai" approved="yes">
         <source>mai</source>
diff --git a/resources/locales/messages.nl.xlf b/resources/locales/messages.nl.xlf
index 25d5ca02ee..fa1c6825c3 100644
--- a/resources/locales/messages.nl.xlf
+++ b/resources/locales/messages.nl.xlf
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <xliff xmlns="urn:oasis:names:tc:xliff:document:1.2" xmlns:jms="urn:jms:translation" version="1.2">
-  <file date="2024-04-17T13:05:47Z" source-language="en" target-language="nl" datatype="plaintext" original="not.available">
+  <file date="2024-04-18T08:41:50Z" source-language="en" target-language="nl" datatype="plaintext" original="not.available">
     <header>
       <tool tool-id="JMSTranslationBundle" tool-name="JMSTranslationBundle" tool-version="1.1.0-DEV"/>
       <note>The source node in most cases contains the sample message as written by the developer. If it looks like a dot-delimitted string such as "form.label.firstname", then the developer has not provided a default message.</note>
@@ -1099,7 +1099,7 @@
       <trans-unit id="a45ff91e0c1ebb94d62f5daaad1e708278ba484e" resname="An unexpected error occurred during authentication process, please contact an admin">
         <source>An unexpected error occurred during authentication process, please contact an admin</source>
         <target state="new">An unexpected error occurred during authentication process, please contact an admin</target>
-        <jms:reference-file line="833">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="831">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="2063ba5ce348f48f77284c961f2291da1fdd79a5" resname="An upload on %bridge_adapter% failed, the resaon is : %reason%">
         <source>An upload on %bridge_adapter% failed, the resaon is : %reason%</source>
@@ -1244,7 +1244,7 @@
       <trans-unit id="927aacfc684a0654a9fc301f52ed3f2441adb363" resname="Are you sure you want to reset rights?" approved="yes">
         <source>Are you sure you want to reset rights?</source>
         <target state="translated">Bent u zeker om de rechten te herstellen?</target>
-        <jms:reference-file line="1392">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="1401">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="74e0b9c80dca267a78a89ad68a2f6c73241b5973" resname="Attention" approved="yes">
         <source>Attention</source>
@@ -2815,7 +2815,7 @@
       <trans-unit id="4492ab77c9378c5582b87621ecd89c96fef88640" resname="Email '%email%' for login '%login%' already exists in database">
         <source>Email '%email%' for login '%login%' already exists in database</source>
         <target state="new">Email '%email%' for login '%login%' already exists in database</target>
-        <jms:reference-file line="806">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="814">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="e4aaac273d3c0d793207e6b559a7b7f97d543064" resname="Email Name" approved="yes">
         <source>Email Name</source>
@@ -4253,17 +4253,17 @@
       <trans-unit id="950c019b3fdf4ee87547ab457330c0f003fdec4b" resname="Login %login% already exists in database">
         <source>Login %login% already exists in database</source>
         <target state="new">Login %login% already exists in database</target>
-        <jms:reference-file line="790">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="798">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="092417444255d19227b90cb8b6a31eb531c3e045" resname="Login %login% is already defined in the file at line %line%">
         <source>Login %login% is already defined in the file at line %line%</source>
         <target state="new">Login %login% is already defined in the file at line %line%</target>
-        <jms:reference-file line="784">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="792">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="01a1b17937851d24fabec72d491bfe7693dcbeb5" resname="Login line %line% is empty">
         <source>Login line %line% is empty</source>
         <target state="new">Login line %line% is empty</target>
-        <jms:reference-file line="782">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="790">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="9a839961790bd116cb1d19dd249a0f68170ea33d" resname="Login to link your account" approved="yes">
         <source>Login to link your account</source>
@@ -4285,7 +4285,7 @@
       <trans-unit id="c176d759339c846576bc2937aab7e01f5404e4e3" resname="Mail line %line% is empty">
         <source>Mail line %line% is empty</source>
         <target state="new">Mail line %line% is empty</target>
-        <jms:reference-file line="804">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="812">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="fdb9efd7a759711741fc699549c92e54c664e38c" resname="Mail sent" approved="yes">
         <source>Mail sent</source>
@@ -4995,7 +4995,7 @@
       <trans-unit id="6e77cc0549ad99a9d3ba5c384f7f329db24d6d0c" resname="Password is empty at line %line%">
         <source>Password is empty at line %line%</source>
         <target state="new">Password is empty at line %line%</target>
-        <jms:reference-file line="819">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="827">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="d8be7287e7454f5c5ed0f570424a959724db8d9b" resname="Past year" approved="yes">
         <source>Past year</source>
@@ -5061,7 +5061,7 @@
       <trans-unit id="17d47194ec888edc3eb2a8f200f0400f787924ff" resname="Phraseanet guest-access is disabled" approved="yes">
         <source>Phraseanet guest-access is disabled</source>
         <target state="translated">Gast toegang voor Phraseanet is niet actief</target>
-        <jms:reference-file line="596">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="594">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="f76e81b1e826c0255a8e7e2b0e9c8f6c33bba34c" resname="Phraseanet may require many binaries." approved="yes">
         <source>Phraseanet may require many binaries.</source>
@@ -7085,7 +7085,7 @@
       <trans-unit id="a5d2dca08b69ce907e38ed1bf35fc219df18edb3" resname="Unable to authenticate with %provider_name%">
         <source>Unable to authenticate with %provider_name%</source>
         <target state="new">Unable to authenticate with %provider_name%</target>
-        <jms:reference-file line="726">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="724">Controller/Root/LoginController.php</jms:reference-file>
         <jms:reference-file line="217">Controller/Api/OAuth2Controller.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="7adcfb8dcac6fb17a9283fcb6b53f1e31ca2f3a0" resname="Unable to connect to MySQL server" approved="yes">
@@ -7103,12 +7103,12 @@
       <trans-unit id="225f62661868b2c3fb3820c94c5727f70b1e7d4c" resname="Unable to create template, the name is already used.">
         <source>Unable to create template, the name is already used.</source>
         <target state="new">Unable to create template, the name is already used.</target>
-        <jms:reference-file line="403">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="411">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="ac9cb56f58dc3e077f9557ed6958e993dae09e71" resname="Unable to create the user.">
         <source>Unable to create the user.</source>
         <target state="new">Unable to create the user.</target>
-        <jms:reference-file line="405">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="413">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="5660d6aac90c7a8f4df9fcad68513c061bef3298" resname="Unable to delete list" approved="yes">
         <source>Unable to delete list</source>
@@ -7128,7 +7128,7 @@
       <trans-unit id="c8cfcd74a9813267d93550c9cf1d2930f23815f0" resname="Unable to retrieve provider identity" approved="yes">
         <source>Unable to retrieve provider identity</source>
         <target state="translated">Het is niet mogelijk om de identiteit van de provider te ontvangen</target>
-        <jms:reference-file line="749">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="747">Controller/Root/LoginController.php</jms:reference-file>
         <jms:reference-file line="234">Controller/Api/OAuth2Controller.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="6af8293be2ccc7fc664c96b11293a226fd300026" resname="Unable to send the documents" approved="yes">
@@ -7348,7 +7348,7 @@
       <trans-unit id="01cb944f89ac99378a7b2fa31bec677774328456" resname="User's publications in feeds">
         <source>User's publications in feeds</source>
         <target state="new">User's publications in feeds</target>
-        <jms:reference-file line="805">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="814">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="57f2b181d0a5e79a147ea1cdf41457f58dbbb3c9" resname="Users" approved="yes">
         <source>Users</source>
@@ -7583,7 +7583,7 @@
       <trans-unit id="0d3d97ffc6b526aad5b5c5e4f99df4298a48ce0b" resname="Vous etes maintenant deconnecte. A bientot." approved="yes">
         <source>Vous etes maintenant deconnecte. A bientot.</source>
         <target state="translated">U bent nu uitgelogd. Tot later.</target>
-        <jms:reference-file line="532">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="530">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="2b31652d33be49a2d9d3187a0c31719a1c834f18" resname="Vous n'avez pas assez de droits sur certains elements selectionnes" approved="yes">
         <source>Vous n'avez pas assez de droits sur certains elements selectionnes</source>
@@ -8002,7 +8002,7 @@
       <trans-unit id="ff2e2369a8f0959a7f665f926ec4d84b3c5a46f5" resname="Your identity is not recognized." approved="yes">
         <source>Your identity is not recognized.</source>
         <target state="translated">Uw identiteit werd niet herkend</target>
-        <jms:reference-file line="790">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="788">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="aaf57216976f942ee7fe118918b2b8893bde955f" resname="Your install might need to build some sub-definitions" approved="yes">
         <source>Your install might need to build some sub-definitions</source>
@@ -8194,7 +8194,7 @@
       <trans-unit id="3c26ea0c44c762e63aa75169b15a670e3fdc1e97" resname="admin :users: user owned api">
         <source>admin :users: user owned api</source>
         <target state="new">admin :users: user owned api</target>
-        <jms:reference-file line="628">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="637">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="3255d759dad94eb721100214aa939ff692a4c2cd" resname="admin:: La collection n'a pas ete creee : vous devez donner un nom a votre collection" approved="yes">
         <source>admin:: La collection n'a pas ete creee : vous devez donner un nom a votre collection</source>
@@ -8616,7 +8616,7 @@
         <source>admin::compte-utilisateur activite</source>
         <target state="translated">Activiteit</target>
         <jms:reference-file line="104">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="444">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="452">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="558">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="221">admin/user/registrations.html.twig</jms:reference-file>
         <jms:reference-file line="122">web/account/account.html.twig</jms:reference-file>
@@ -8625,7 +8625,7 @@
         <source>admin::compte-utilisateur adresse</source>
         <target state="translated">Adres</target>
         <jms:reference-file line="69">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="436">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="444">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="414">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="517">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="225">admin/user/registrations.html.twig</jms:reference-file>
@@ -8640,7 +8640,7 @@
         <source>admin::compte-utilisateur code postal</source>
         <target state="translated">Postcode</target>
         <jms:reference-file line="76">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="438">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="446">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="421">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="525">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="94">web/account/account.html.twig</jms:reference-file>
@@ -8670,7 +8670,7 @@
         <source>admin::compte-utilisateur email</source>
         <target state="translated">Email</target>
         <jms:reference-file line="117">Event/Subscriber/RegistrationSubscriber.php</jms:reference-file>
-        <jms:reference-file line="433">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="441">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="361">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="151">web/admin/users.html.twig</jms:reference-file>
         <jms:reference-file line="22">web/admin/connected-users.html.twig</jms:reference-file>
@@ -8682,7 +8682,7 @@
         <source>admin::compte-utilisateur fax</source>
         <target state="translated">Fax</target>
         <jms:reference-file line="118">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="441">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="449">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="575">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="136">web/account/account.html.twig</jms:reference-file>
       </trans-unit>
@@ -8718,7 +8718,7 @@
         <target state="translated">Naam</target>
         <jms:reference-file line="62">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
         <jms:reference-file line="115">Event/Subscriber/RegistrationSubscriber.php</jms:reference-file>
-        <jms:reference-file line="431">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="439">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="379">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="13">web/admin/connected-users.html.twig</jms:reference-file>
         <jms:reference-file line="501">web/admin/editusers.html.twig</jms:reference-file>
@@ -8733,14 +8733,14 @@
       <trans-unit id="1b83f90c602146fc09f3e025507c9b11aa10772a" resname="admin::compte-utilisateur pays" approved="yes">
         <source>admin::compte-utilisateur pays</source>
         <target state="translated">Land</target>
-        <jms:reference-file line="439">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="447">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="156">web/admin/users.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="28c517ddecdb662c767290d2e1fa53ef198307fa" resname="admin::compte-utilisateur poste" approved="yes">
         <source>admin::compte-utilisateur poste</source>
         <target state="translated">Postcode</target>
         <jms:reference-file line="90">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="442">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="450">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="407">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="542">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="219">admin/user/registrations.html.twig</jms:reference-file>
@@ -8751,7 +8751,7 @@
         <target state="translated">Voornaam</target>
         <jms:reference-file line="55">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
         <jms:reference-file line="116">Event/Subscriber/RegistrationSubscriber.php</jms:reference-file>
-        <jms:reference-file line="432">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="440">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="386">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="493">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="213">admin/user/registrations.html.twig</jms:reference-file>
@@ -8768,7 +8768,7 @@
         <source>admin::compte-utilisateur societe</source>
         <target state="translated">Bedrijf</target>
         <jms:reference-file line="97">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="443">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="451">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="400">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="146">web/admin/users.html.twig</jms:reference-file>
         <jms:reference-file line="16">web/admin/connected-users.html.twig</jms:reference-file>
@@ -8784,7 +8784,7 @@
       <trans-unit id="aa3ffb658796d685813791430da4efdac145b8d9" resname="admin::compte-utilisateur telephone" approved="yes">
         <source>admin::compte-utilisateur telephone</source>
         <target state="translated">Telefoon</target>
-        <jms:reference-file line="440">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="448">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="393">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="19">web/admin/connected-users.html.twig</jms:reference-file>
         <jms:reference-file line="567">web/admin/editusers.html.twig</jms:reference-file>
@@ -8800,7 +8800,7 @@
         <source>admin::compte-utilisateur ville</source>
         <target state="translated">Star</target>
         <jms:reference-file line="83">Core/Provider/RegistrationServiceProvider.php</jms:reference-file>
-        <jms:reference-file line="437">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="445">Controller/Admin/UserController.php</jms:reference-file>
         <jms:reference-file line="428">web/common/dialog_export.html.twig</jms:reference-file>
         <jms:reference-file line="533">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="101">web/account/account.html.twig</jms:reference-file>
@@ -9350,12 +9350,12 @@
       <trans-unit id="382c04ad6bd750ac249b38f17889d00baed79984" resname="admin::users: Api id">
         <source>admin::users: Api id</source>
         <target state="new">admin::users: Api id</target>
-        <jms:reference-file line="663">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="672">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="f2cfa8b40f83359062cca1806e40e189c001b404" resname="admin::users: Api name">
         <source>admin::users: Api name</source>
         <target state="new">admin::users: Api name</target>
-        <jms:reference-file line="664">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="673">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="b7c39510d9e25cf5af8c360cce029ffa1dc2ef88" resname="admin::users: Auth failure">
         <source>admin::users: Auth failure</source>
@@ -9365,7 +9365,7 @@
       <trans-unit id="a1c3bbe023ec149af9ca57351a03532f25d9c475" resname="admin::users: api ID">
         <source>admin::users: api ID</source>
         <target state="new">admin::users: api ID</target>
-        <jms:reference-file line="633">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="642">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="e12b10eeccf3c4f722e66750eaa2886573a6b803" resname="admin::users: api list">
         <source>admin::users: api list</source>
@@ -9375,27 +9375,27 @@
       <trans-unit id="1f92b414f86ee855323c7d9ffba61c091ebea92f" resname="admin::users: api oauth code list">
         <source>admin::users: api oauth code list</source>
         <target state="new">admin::users: api oauth code list</target>
-        <jms:reference-file line="659">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="668">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="fc7984833e39797984814936ab510cfd4080bc18" resname="admin::users: auth failure locked list">
         <source>admin::users: auth failure locked list</source>
         <target state="new">admin::users: auth failure locked list</target>
-        <jms:reference-file line="690">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="699">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="a7cc508c7cb0f9b1d27e69e9a422670183236ec5" resname="admin::users: auth failure unlocked list">
         <source>admin::users: auth failure unlocked list</source>
         <target state="new">admin::users: auth failure unlocked list</target>
-        <jms:reference-file line="717">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="726">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="333dc596de24529211ed2966582e8aae28b72238" resname="admin::users: creation date">
         <source>admin::users: creation date</source>
         <target state="new">admin::users: creation date</target>
         <jms:reference-file line="18">web/admin/auth-failure.html.twig</jms:reference-file>
-        <jms:reference-file line="601">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="634">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="667">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="696">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="723">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="610">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="643">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="676">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="705">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="732">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="c767eb6f0297cbffa3fa9591dc197542c96a8bae" resname="admin::users: delete auth failure">
         <source>admin::users: delete auth failure</source>
@@ -9405,7 +9405,7 @@
       <trans-unit id="e2d00e6f420c23a8910d8c20a4a938cac197bb8e" resname="admin::users: distance_id">
         <source>admin::users: distance_id</source>
         <target state="new">admin::users: distance_id</target>
-        <jms:reference-file line="600">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="609">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="e7ab6de2942a61fb7b79f5f4b4e3d95db0fe528f" resname="admin::users: erase auth failure table">
         <source>admin::users: erase auth failure table</source>
@@ -9415,24 +9415,24 @@
       <trans-unit id="8e47404e0029c675581606660cbe525ff1f9c749" resname="admin::users: grant password info">
         <source>admin::users: grant password info</source>
         <target state="new">admin::users: grant password info</target>
-        <jms:reference-file line="637">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="646">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="3fc5e0916ce91a50c260f25b88bcc5e36b089210" resname="admin::users: ip">
         <source>admin::users: ip</source>
         <target state="new">admin::users: ip</target>
         <jms:reference-file line="16">web/admin/auth-failure.html.twig</jms:reference-file>
-        <jms:reference-file line="695">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="722">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="704">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="731">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="b334c6f1e8ef850c8b78d860550e66bbd5a299e9" resname="admin::users: list user api application">
         <source>admin::users: list user api application</source>
         <target state="new">admin::users: list user api application</target>
-        <jms:reference-file line="620">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="629">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="496a4f6a90f31903c0220ff8cee21bf75a473c4f" resname="admin::users: list user providers">
         <source>admin::users: list user providers</source>
         <target state="new">admin::users: list user providers</target>
-        <jms:reference-file line="596">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="605">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="4344a147edb8f171db16fa1916addea8d5ebde19" resname="admin::users: locked">
         <source>admin::users: locked</source>
@@ -9442,72 +9442,72 @@
       <trans-unit id="e76893b673dcca93abf91a13f24e586b7f399823" resname="admin::users: modification date">
         <source>admin::users: modification date</source>
         <target state="new">admin::users: modification date</target>
-        <jms:reference-file line="602">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="635">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="611">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="644">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="0a71173381c1c8b659c9f7ac05cd5dfed8d3b97e" resname="admin::users: no api defined for this user">
         <source>admin::users: no api defined for this user</source>
         <target state="new">admin::users: no api defined for this user</target>
-        <jms:reference-file line="654">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="663">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="85d760f5a5e3b7c29f17485512d9225ccdd40811" resname="admin::users: password granted">
         <source>admin::users: password granted</source>
         <target state="new">admin::users: password granted</target>
         <jms:reference-file line="107">admin/inspector/record-index.html.twig</jms:reference-file>
-        <jms:reference-file line="638">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="647">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="74411bbacf01ba76709c7cf0135e7c4aeed0c180" resname="admin::users: password not granted">
         <source>admin::users: password not granted</source>
         <target state="new">admin::users: password not granted</target>
         <jms:reference-file line="109">admin/inspector/record-index.html.twig</jms:reference-file>
-        <jms:reference-file line="638">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="647">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="3c6e9df1925ca0ae9df114b4c17e7667ec66f5d7" resname="admin::users: provider">
         <source>admin::users: provider</source>
         <target state="new">admin::users: provider</target>
-        <jms:reference-file line="599">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="608">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="6cfb4576a83ebc4343a74a84024777119fadbd25" resname="admin::users: redirect uri">
         <source>admin::users: redirect uri</source>
         <target state="new">admin::users: redirect uri</target>
-        <jms:reference-file line="665">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="674">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="af5cd4f04496cdfefe14ae0737a3a9ea175203a9" resname="admin::users: reset auth failure">
         <source>admin::users: reset auth failure</source>
         <target state="new">admin::users: reset auth failure</target>
-        <jms:reference-file line="710">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="719">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="4bba269c4ff3ce66aed91e3da5d9ecc27eb46de1" resname="admin::users: scope">
         <source>admin::users: scope</source>
         <target state="new">admin::users: scope</target>
-        <jms:reference-file line="666">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="675">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="e6ca0a61942f216df1672e612b4e27fdbf498ca2" resname="admin::users: type info">
         <source>admin::users: type info</source>
         <target state="new">admin::users: type info</target>
-        <jms:reference-file line="640">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="649">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="fe2cdf3da09f988f7531c1a794f9754fdcfaa00e" resname="admin::users: user api use">
         <source>admin::users: user api use</source>
         <target state="new">admin::users: user api use</target>
-        <jms:reference-file line="630">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="639">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="54592d34674af3046462e72065524cdc0c7352a1" resname="admin::users: username">
         <source>admin::users: username</source>
         <target state="new">admin::users: username</target>
         <jms:reference-file line="15">web/admin/auth-failure.html.twig</jms:reference-file>
-        <jms:reference-file line="694">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="721">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="703">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="730">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="6677c212551cdee298546dbe82fa8bdfa6c2e51c" resname="admin::users: webhook activation">
         <source>admin::users: webhook activation</source>
         <target state="new">admin::users: webhook activation</target>
-        <jms:reference-file line="644">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="653">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="77b1da0932d4748877dc55b8321a96460a7e8ab0" resname="admin::users: webhook url">
         <source>admin::users: webhook url</source>
         <target state="new">admin::users: webhook url</target>
-        <jms:reference-file line="641">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="650">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="68a6b3e4f84d0b990bb8da26132116dc6185d5ce" resname="admin::users:edit: Manage inline selection">
         <source>admin::users:edit: Manage inline selection</source>
@@ -10069,9 +10069,9 @@
         <target state="new">admin:phrasea-service-setting:tab:expose:: activate Phraseanet-service expose</target>
         <jms:reference-file line="29">PhraseanetService/Form/PSExposeConfigurationType.php</jms:reference-file>
       </trans-unit>
-      <trans-unit id="83403d4291975d8f707f1a24554617ed711143d0" resname="admin:phrasea-service-setting:tab:expose:: auth provider name with type ps-auth">
-        <source>admin:phrasea-service-setting:tab:expose:: auth provider name with type ps-auth</source>
-        <target state="new">admin:phrasea-service-setting:tab:expose:: auth provider name with type ps-auth</target>
+      <trans-unit id="e247d6ed88683925b4f13f7cc2c4d6b97d1efa9e" resname="admin:phrasea-service-setting:tab:expose:: auth provider name with type openid">
+        <source>admin:phrasea-service-setting:tab:expose:: auth provider name with type openid</source>
+        <target state="new">admin:phrasea-service-setting:tab:expose:: auth provider name with type openid</target>
         <jms:reference-file line="48">PhraseanetService/Form/PSExposeConnectionType.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="efcf63b34a4b02de67804c139282d1c5d3d05b0b" resname="admin:phrasea-service-setting:tab:expose:: verify ssl">
@@ -10508,7 +10508,7 @@
         <jms:reference-file line="25">Bridge/Dailymotion/playlist_createcontainer.html.twig</jms:reference-file>
         <jms:reference-file line="44">admin/collection/details.html.twig</jms:reference-file>
         <jms:reference-file line="223">admin/publications/fiche.html.twig</jms:reference-file>
-        <jms:reference-file line="859">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="868">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="50">user/import/file.html.twig</jms:reference-file>
         <jms:reference-file line="69">admin/databox/details.html.twig</jms:reference-file>
         <jms:reference-file line="163">admin/statusbit/edit.html.twig</jms:reference-file>
@@ -10622,7 +10622,7 @@
         <jms:reference-file line="128">admin/publications/fiche.html.twig</jms:reference-file>
         <jms:reference-file line="45">admin/publications/list.html.twig</jms:reference-file>
         <jms:reference-file line="415">web/admin/subdefs.html.twig</jms:reference-file>
-        <jms:reference-file line="858">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="867">web/admin/editusers.html.twig</jms:reference-file>
         <jms:reference-file line="83">web/admin/setup.html.twig</jms:reference-file>
         <jms:reference-file line="34">web/admin/structure.html.twig</jms:reference-file>
         <jms:reference-file line="117">web/admin/dashboard.html.twig</jms:reference-file>
@@ -10656,13 +10656,13 @@
         <target state="new">button::choose databox</target>
         <jms:reference-file line="47">admin/worker-manager/worker_info.html.twig</jms:reference-file>
         <jms:reference-file line="22">admin/inspector/record-index.html.twig</jms:reference-file>
-        <jms:reference-file line="748">web/admin/editusers.html.twig</jms:reference-file>
-        <jms:reference-file line="825">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="757">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="834">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="f013ff9e62d4ae563de3270b3297f9da2afefcc9" resname="button::choose type">
         <source>button::choose type</source>
         <target state="new">button::choose type</target>
-        <jms:reference-file line="755">web/admin/editusers.html.twig</jms:reference-file>
+        <jms:reference-file line="764">web/admin/editusers.html.twig</jms:reference-file>
       </trans-unit>
       <trans-unit id="1dd4da0afbec8df77d3124368070a28fa3fc8960" resname="button::no">
         <source>button::no</source>
@@ -11732,18 +11732,18 @@
       <trans-unit id="8af68da04218b6188405e5f7422866b5412ec7a8" resname="login::erreur: Erreur d'authentification" approved="yes">
         <source>login::erreur: Erreur d'authentification</source>
         <target state="translated">Verificatiefout</target>
-        <jms:reference-file line="863">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="861">Controller/Root/LoginController.php</jms:reference-file>
         <jms:reference-file line="103">Controller/Api/OAuth2Controller.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="e7678ea875773920bf91f79b62b97f31986f211b" resname="login::erreur: No available connection - Please contact sys-admin" approved="yes">
         <source>login::erreur: No available connection - Please contact sys-admin</source>
         <target state="translated">Geen beschikbare verbinding - Neem contact op met sys-admin</target>
-        <jms:reference-file line="555">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="553">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="dcc7f0cac10852ef9bcc7f10019e2679174e3df7" resname="login::erreur: Vous n'avez pas confirme votre email" approved="yes">
         <source>login::erreur: Vous n'avez pas confirme votre email</source>
         <target state="translated">U hebt uw email adres niet bevestigd</target>
-        <jms:reference-file line="856">Controller/Root/LoginController.php</jms:reference-file>
+        <jms:reference-file line="854">Controller/Root/LoginController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="5cdbff50d2a3ae92720c5af32d4cd560d1351a91" resname="login::notification: Changements enregistres" approved="yes">
         <source>login::notification: Changements enregistres</source>
@@ -11792,12 +11792,12 @@
       <trans-unit id="ace8a8481cf18b9b69c30aa34a65135ed2d75277" resname="login::register:email: Vous avez ete accepte sur les collections suivantes : ">
         <source>login::register:email: Vous avez ete accepte sur les collections suivantes :</source>
         <target state="new">login::register:email: Vous avez ete accepte sur les collections suivantes : </target>
-        <jms:reference-file line="672">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="680">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="20fc11d974588d0abed50d717ed3174eff70ac83" resname="login::register:email: Vous avez ete refuse sur les collections suivantes : ">
         <source>login::register:email: Vous avez ete refuse sur les collections suivantes :</source>
         <target state="new">login::register:email: Vous avez ete refuse sur les collections suivantes : </target>
-        <jms:reference-file line="675">Controller/Admin/UserController.php</jms:reference-file>
+        <jms:reference-file line="683">Controller/Admin/UserController.php</jms:reference-file>
       </trans-unit>
       <trans-unit id="ea4440bd94714e4e85334618405679ae2e36f4f1" resname="mai" approved="yes">
         <source>mai</source>
diff --git a/resources/locales/validators.de.xlf b/resources/locales/validators.de.xlf
index f1bb0c039b..dfa494a2d4 100644
--- a/resources/locales/validators.de.xlf
+++ b/resources/locales/validators.de.xlf
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <xliff xmlns="urn:oasis:names:tc:xliff:document:1.2" xmlns:jms="urn:jms:translation" version="1.2">
-  <file date="2024-04-17T13:04:48Z" source-language="en" target-language="de" datatype="plaintext" original="not.available">
+  <file date="2024-04-18T08:40:52Z" source-language="en" target-language="de" datatype="plaintext" original="not.available">
     <header>
       <tool tool-id="JMSTranslationBundle" tool-name="JMSTranslationBundle" tool-version="1.1.0-DEV"/>
       <note>The source node in most cases contains the sample message as written by the developer. If it looks like a dot-delimitted string such as "form.label.firstname", then the developer has not provided a default message.</note>
diff --git a/resources/locales/validators.en.xlf b/resources/locales/validators.en.xlf
index 7c71b6dbf5..9a6a94f2d5 100644
--- a/resources/locales/validators.en.xlf
+++ b/resources/locales/validators.en.xlf
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <xliff xmlns="urn:oasis:names:tc:xliff:document:1.2" xmlns:jms="urn:jms:translation" version="1.2">
-  <file date="2024-04-17T13:05:04Z" source-language="en" target-language="en" datatype="plaintext" original="not.available">
+  <file date="2024-04-18T08:41:08Z" source-language="en" target-language="en" datatype="plaintext" original="not.available">
     <header>
       <tool tool-id="JMSTranslationBundle" tool-name="JMSTranslationBundle" tool-version="1.1.0-DEV"/>
       <note>The source node in most cases contains the sample message as written by the developer. If it looks like a dot-delimitted string such as "form.label.firstname", then the developer has not provided a default message.</note>
diff --git a/resources/locales/validators.fr.xlf b/resources/locales/validators.fr.xlf
index 5423249be8..fabf6a0867 100644
--- a/resources/locales/validators.fr.xlf
+++ b/resources/locales/validators.fr.xlf
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <xliff xmlns="urn:oasis:names:tc:xliff:document:1.2" xmlns:jms="urn:jms:translation" version="1.2">
-  <file date="2024-04-17T13:05:24Z" source-language="en" target-language="fr" datatype="plaintext" original="not.available">
+  <file date="2024-04-18T08:41:27Z" source-language="en" target-language="fr" datatype="plaintext" original="not.available">
     <header>
       <tool tool-id="JMSTranslationBundle" tool-name="JMSTranslationBundle" tool-version="1.1.0-DEV"/>
       <note>The source node in most cases contains the sample message as written by the developer. If it looks like a dot-delimitted string such as "form.label.firstname", then the developer has not provided a default message.</note>
diff --git a/resources/locales/validators.nl.xlf b/resources/locales/validators.nl.xlf
index 500b909c1f..492c6a35bb 100644
--- a/resources/locales/validators.nl.xlf
+++ b/resources/locales/validators.nl.xlf
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <xliff xmlns="urn:oasis:names:tc:xliff:document:1.2" xmlns:jms="urn:jms:translation" version="1.2">
-  <file date="2024-04-17T13:05:47Z" source-language="en" target-language="nl" datatype="plaintext" original="not.available">
+  <file date="2024-04-18T08:41:50Z" source-language="en" target-language="nl" datatype="plaintext" original="not.available">
     <header>
       <tool tool-id="JMSTranslationBundle" tool-name="JMSTranslationBundle" tool-version="1.1.0-DEV"/>
       <note>The source node in most cases contains the sample message as written by the developer. If it looks like a dot-delimitted string such as "form.label.firstname", then the developer has not provided a default message.</note>
diff --git a/templates/web/admin/editusers.html.twig b/templates/web/admin/editusers.html.twig
index 56743c3996..bd71bcdc28 100644
--- a/templates/web/admin/editusers.html.twig
+++ b/templates/web/admin/editusers.html.twig
@@ -582,7 +582,7 @@
         </form>
 
         <div>
-          <label for="lock" style="margin-right: 20px;display:inline-block;">Email locked</label>
+          <label for="lock" style="margin-right: 20px;display:inline-block;min-width: 150px;">Email locked</label>
           <input type="radio" id="lock" name="email-locked" value="locked" style="margin-right: 10px;"
                   {% if main_user.isMailLocked() %} checked {% endif %}>
           <input type="radio" id="unlock" name="email-locked" value="unlock" style="margin-left: 10px;"
@@ -590,6 +590,15 @@
           <label for="unlock" style="margin-left: 20px;display:inline-block;">Email unlocked</label>
         </div>
 
+        <div style="margin-top: 15px;">
+          <label for="can-renew" style="margin-right: 20px;display:inline-block;min-width: 150px;">can renew password</label>
+          <input type="radio" id="can-renew" name="can-renew-password" value="can-renew" style="margin-right: 10px;"
+                  {% if main_user.canRenewPassword() %} checked {% endif %}>
+          <input type="radio" id="cannot-renew" name="can-renew-password" value="cannot-renew" style="margin-left: 10px;"
+                  {% if not main_user.canRenewPassword() %} checked {% endif %}>
+          <label for="cannot-renew" style="margin-left: 20px;display:inline-block;">can not renew password</label>
+        </div>
+
         <div style="margin-top: 20px;">
           {% set usrProviders = app['repo.usr-auth-providers'].findByUser(main_user) %}
           {% if usrProviders|length > 0 %}
@@ -1508,6 +1517,21 @@
         });
       });
 
+      $('input[type=radio][name="can-renew-password"]').change( function() {
+        let $this = $(this);
+        $.ajax({
+          type: 'POST',
+          url: '/admin/users/can-renew-password/change/',
+          dataType: 'json',
+          data: {
+            user_id: {{ main_user.getId() }},
+            action: $this.val()
+          },
+          success: function (data) {
+          }
+        });
+      });
+
       function listRecordAcl() {
         let expiredRight = 0;
         if ($("#expired-right").is(":checked"))
diff --git a/tests/Alchemy/Tests/Phrasea/Authentication/Provider/FactoryTest.php b/tests/Alchemy/Tests/Phrasea/Authentication/Provider/FactoryTest.php
index 8bbfd4e19b..a197c58409 100644
--- a/tests/Alchemy/Tests/Phrasea/Authentication/Provider/FactoryTest.php
+++ b/tests/Alchemy/Tests/Phrasea/Authentication/Provider/FactoryTest.php
@@ -98,16 +98,15 @@ class FactoryTest extends \PhraseanetTestCase
                 'Alchemy\Phrasea\Authentication\Provider\Viadeo'
             ],
             [
-                'ps-auth-foo',
-                'ps-auth',
+                'openid-foo',
+                'openid',
                 [
                     'client-id' => 'id',
                     'client-secret' => 'secret',
                     'base-url' => 'https://api-auth.phrasea.local',
-                    'provider-type' => 'oauth',
-                    'provider-name' => 'v2',
+                    'realm-name' => 'phrasea',
                 ],
-                'Alchemy\Phrasea\Authentication\Provider\PsAuth'
+                'Alchemy\Phrasea\Authentication\Provider\Openid'
             ]
         ];
     }
diff --git a/tests/Alchemy/Tests/Phrasea/Core/Configuration/Fixtures/configuration-setup.yml b/tests/Alchemy/Tests/Phrasea/Core/Configuration/Fixtures/configuration-setup.yml
index a8640ec782..361cc8135d 100644
--- a/tests/Alchemy/Tests/Phrasea/Core/Configuration/Fixtures/configuration-setup.yml
+++ b/tests/Alchemy/Tests/Phrasea/Core/Configuration/Fixtures/configuration-setup.yml
@@ -168,17 +168,16 @@ authentication:
             options:
                 client-id: ''
                 client-secret: ''
-        ps_auth_1:
+        openid-1:
             enabled: false
             display: false
-            title: 'PS Auth 1'
-            type: 'ps-auth'
+            title: 'openid 1'
+            type: openid
             options:
                 client-id: ''
                 client-secret: ''
-                base-url: 'https://api-auth.phrasea.local'
-                provider-type: 'oauth'
-                provider-name: 'v2'
+                base-url: 'https://keycloak.phrasea.local'
+                realm-name: phrasea
                 icon-uri: null
 registration-fields:
     -
diff --git a/tests/Alchemy/Tests/Phrasea/Core/Configuration/Fixtures/configuration-with-hosts.yml b/tests/Alchemy/Tests/Phrasea/Core/Configuration/Fixtures/configuration-with-hosts.yml
index 361d6e10f7..d36f57991d 100644
--- a/tests/Alchemy/Tests/Phrasea/Core/Configuration/Fixtures/configuration-with-hosts.yml
+++ b/tests/Alchemy/Tests/Phrasea/Core/Configuration/Fixtures/configuration-with-hosts.yml
@@ -183,17 +183,16 @@ authentication:
             options:
                 client-id: ''
                 client-secret: ''
-        ps_auth_1:
+        openid-1:
             enabled: false
             display: false
-            title: 'PS Auth 1'
-            type: 'ps-auth'
+            title: 'openid 1'
+            type: openid
             options:
                 client-id: ''
                 client-secret: ''
-                base-url: 'https://api-auth.phrasea.local'
-                provider-type: 'oauth'
-                provider-name: 'v2'
+                base-url: 'https://keycloak.phrasea.local'
+                realm-name: phrasea
                 icon-uri: null
 registration-fields:
     -
diff --git a/tests/Alchemy/Tests/Phrasea/Core/Configuration/Fixtures/configuration.yml b/tests/Alchemy/Tests/Phrasea/Core/Configuration/Fixtures/configuration.yml
index a8640ec782..361cc8135d 100644
--- a/tests/Alchemy/Tests/Phrasea/Core/Configuration/Fixtures/configuration.yml
+++ b/tests/Alchemy/Tests/Phrasea/Core/Configuration/Fixtures/configuration.yml
@@ -168,17 +168,16 @@ authentication:
             options:
                 client-id: ''
                 client-secret: ''
-        ps_auth_1:
+        openid-1:
             enabled: false
             display: false
-            title: 'PS Auth 1'
-            type: 'ps-auth'
+            title: 'openid 1'
+            type: openid
             options:
                 client-id: ''
                 client-secret: ''
-                base-url: 'https://api-auth.phrasea.local'
-                provider-type: 'oauth'
-                provider-name: 'v2'
+                base-url: 'https://keycloak.phrasea.local'
+                realm-name: phrasea
                 icon-uri: null
 registration-fields:
     -
diff --git a/tests/Alchemy/Tests/Phrasea/Core/Event/Subscriber/Fixtures/configuration-maintenance.yml b/tests/Alchemy/Tests/Phrasea/Core/Event/Subscriber/Fixtures/configuration-maintenance.yml
index 0462e20ffa..8ee9599766 100644
--- a/tests/Alchemy/Tests/Phrasea/Core/Event/Subscriber/Fixtures/configuration-maintenance.yml
+++ b/tests/Alchemy/Tests/Phrasea/Core/Event/Subscriber/Fixtures/configuration-maintenance.yml
@@ -133,17 +133,16 @@ authentication:
             options:
                 client-id: ''
                 client-secret: ''
-        ps_auth_1:
+        openid-1:
             enabled: false
             display: false
-            title: 'PS Auth 1'
-            type: 'ps-auth'
+            title: 'openid 1'
+            type: openid
             options:
                 client-id: ''
                 client-secret: ''
-                base-url: 'https://api-auth.phrasea.local'
-                provider-type: 'oauth'
-                provider-name: 'v2'
+                base-url: 'https://keycloak.phrasea.local'
+                realm-name: phrasea
                 icon-uri: null
 registration-fields:
     -
diff --git a/tests/Alchemy/Tests/Phrasea/Plugin/Fixtures/PluginDir/TestPlugin/composer.lock b/tests/Alchemy/Tests/Phrasea/Plugin/Fixtures/PluginDir/TestPlugin/composer.lock
new file mode 100644
index 0000000000..ebf4705ea7
--- /dev/null
+++ b/tests/Alchemy/Tests/Phrasea/Plugin/Fixtures/PluginDir/TestPlugin/composer.lock
@@ -0,0 +1,18 @@
+{
+    "_readme": [
+        "This file locks the dependencies of your project to a known state",
+        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
+        "This file is @generated automatically"
+    ],
+    "content-hash": "2f3a1ed4816797820ab9fdbc67c25cc8",
+    "packages": [],
+    "packages-dev": [],
+    "aliases": [],
+    "minimum-stability": "stable",
+    "stability-flags": [],
+    "prefer-stable": false,
+    "prefer-lowest": false,
+    "platform": [],
+    "platform-dev": [],
+    "plugin-api-version": "2.2.0"
+}