[keycloak-dev] usersession-based UserModels

[Bill Burke]

On 3/25/2015 9:54 AM, Stian Thorgersen wrote:
> If we don't create a user in the db for a federated or brokered user wouldn't we loose a lot of functionality like:
>
> * Account management
> * Required actions
> * Linking multiple brokered/federated accounts with a single internal account
>

Maybe you're right, but most of those things don't make sense if you're 
completely delegating login to an external provider.  I worry how many 
users just want to use us as a bridge between their external IDPs and 
their web apps.


-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com