Rolling Back

If for any reason CIAM needs to be turned off again for a given environment type:

1. Set CIAM_integration_environment_<ENV>_enabled = falseinCIAMIntegrationConfigValues variable group.
2. Re-deploy the instance(s) with Update strategy. The pipeline will inject the “disabled” placeholders (Enabled = false, Options = [], empty UserProvisioner block) in OAuth.config and OAuthServer.Plugins.json. As a result the instance will use no CIAM integration on OAuth Server configuration.
3. (Optional) Disable or delete the corresponding CIAM application manually.

The repository changes in OAuth Server transformations can stay in place they are automatically adjusted according to the CIAM_integration_environment_<ENV>_enabled flag and do not enable CIAM by themselves.
If you want to remove the configuration, you need revert the commit with transformations in SDE, make sure to run a CI and deploy pipelines after that to clean up the CIAM configuration from the instance.