Steps to reproduce (not recommended): - create some dynamically registered clients, 3 or 4 is fine - select all of these in the Admin UI and click delete (clients succesfully deleted) - leave the browser on the clients page and create some more dynamically registered clients - refresh your clients page and cry as your admin UI client is deleted (crying optional); obviously which clients will be deleted depends on the items remaining on the page when you refresh and therefore resend the delete request. Fortunately I had a backup and so could spin up and retrieve the LDIF entries that were lost, however I think it would be nice to protect against this somehow. Probably the delete requests from the browser should refer to the specific client IDs to be deleted, instead of (as I guess it currently is) using an index-reference.