<div dir="ltr">Added to the doc</div><div class="gmail_extra"><br><div class="gmail_quote">On 4 March 2016 at 02:45, Bill Burke <span dir="ltr"><<a href="mailto:bburke@redhat.com" target="_blank">bburke@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
Some additional thoughts:<br>
* All user and realm metadata (group, roles, etc..) needs to be
referenced by a URI. URI would have a schema like this:
{provider}:{identifier}. Identifier can be anything. A keycloak
datastore would just be a primary key id, for LDAP it might be the
username, rolename, group name. You get the picture. Then a
manager service ould be used to resolve the URI into an actual Model
interface. User reference URIs could point to a broker (social or
parent IDP),an LDAP store, local keycloak db, etc.<br>
* For social login and brokering you would assign a user storage
mechanism to import the user into. We would have 3 possible
built-in options, JPA or Mongo, and Infinispan clustered in-memory
cache.<span class=""><br>
<br>
<div>On 3/3/2016 2:09 PM, Stian Thorgersen
wrote:<br>
</div>
</span><blockquote type="cite"><span class="">
<div dir="ltr">I've written up some thoughts on improving the
model for 2.x at <a href="https://docs.google.com/a/redhat.com/document/d/1ZmPjlJYvk_fwYvnWxz1E49ioZFZa3kfYCI1xE5gVClc/pub" target="_blank">https://docs.google.com/a/redhat.com/document/d/1ZmPjlJYvk_fwYvnWxz1E49ioZFZa3kfYCI1xE5gVClc/pub</a>
<div><br>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
</span><pre>_______________________________________________
keycloak-dev mailing list
<a href="mailto:keycloak-dev@lists.jboss.org" target="_blank">keycloak-dev@lists.jboss.org</a>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a></pre><span class="HOEnZb"><font color="#888888">
</font></span></blockquote><span class="HOEnZb"><font color="#888888">
<br>
<pre cols="72">--
Bill Burke
JBoss, a division of Red Hat
<a href="http://bill.burkecentral.com" target="_blank">http://bill.burkecentral.com</a></pre>
</font></span></div>
<br>_______________________________________________<br>
keycloak-dev mailing list<br>
<a href="mailto:keycloak-dev@lists.jboss.org">keycloak-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a><br></blockquote></div><br></div>