[keycloak-user] Migrating Users Database

Rodrigo Sasaki rodrigopsasaki at gmail.com
Thu May 15 10:05:42 EDT 2014


That's quite alright at the moment.

We have seen the roadmap and if it stays around the announced dates, there
shouldn't be a problem for us here.


On Thu, May 15, 2014 at 11:03 AM, Bill Burke <bburke at redhat.com> wrote:

> FYI, Keycloak will be very slow until we start our performance work
> (scheduled for Beta-2).  Right now, every login/logout/token action is
> all DB hits.  We don't cache anything at the moment!
>
> On 5/15/2014 7:02 AM, Rodrigo Sasaki wrote:
> > I am very interested in importing the whole database. It seems to be the
> > cleanest way to do what we want to do here, and migrate to keycloak
> > completely.
> >
> > Are there any guidelines on how to do this? Nonetheless I will look into
> > the SPI you mentioned, might come in handy sometime.
> >
> >
> > On Thu, May 15, 2014 at 5:13 AM, Stian Thorgersen <stian at redhat.com
> > <mailto:stian at redhat.com>> wrote:
> >
> >     At the moment we have an Authentication SPI that will let you easily
> >     authenticate users with your existing database of users. The first
> >     time a new user logs in using this approach a user will be pulled in
> >     to the Keycloak database. There's no documentation for this feature
> >     yet, but look at the SPI at
> >
> https://github.com/keycloak/keycloak/tree/master/authentication/authentication-api
> >     and the implementation that uses the Keycloak model itself to
> >     authenticate at
> >
> https://github.com/keycloak/keycloak/tree/master/authentication/authentication-model
> .
> >
> >     In the future we plan to provide a Sync SPI that will take this one
> >     step further and let you sync users (and roles) to/from an existing
> >     database.
> >
> >     However, if you plan to completely replace your current
> >     authentication system the cleanest solution may be to import your
> >     current user database into Keycloak once and for all. If you're
> >     interested in this approach let me know.
> >
> >     ----- Original Message -----
> >      > From: "Rodrigo Sasaki" <rodrigopsasaki at gmail.com
> >     <mailto:rodrigopsasaki at gmail.com>>
> >      > To: keycloak-user at lists.jboss.org
> >     <mailto:keycloak-user at lists.jboss.org>
> >      > Sent: Wednesday, 14 May, 2014 8:52:07 PM
> >      > Subject: [keycloak-user] Migrating Users Database
> >      >
> >      > Hi,
> >      >
> >      > I'm trying to replace my current authentication system with
> >     Keycloak, but I
> >      > have one problem. I already have a database of users, populated
> with
> >      > millions of records, and I wanted to make it work with Keycloak.
> >      >
> >      > What would be the best approach on this scenario? Should I
> >     migrate everything
> >      > to the Keycloak tables, or try to make Keycloak understand my
> current
> >      > database?
> >      >
> >      > Is there any recommendation on this matter? And if there is, some
> >     explanation
> >      > or documentation?
> >      >
> >      > Thanks!
> >      >
> >      > --
> >      > Rodrigo Sasaki
> >      >
> >      > _______________________________________________
> >      > keycloak-user mailing list
> >      > keycloak-user at lists.jboss.org <mailto:
> keycloak-user at lists.jboss.org>
> >      > https://lists.jboss.org/mailman/listinfo/keycloak-user
> >
> >
> >
> >
> > --
> > Rodrigo Sasaki
> >
> >
> > _______________________________________________
> > keycloak-user mailing list
> > keycloak-user at lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-user
> >
>
> --
> Bill Burke
> JBoss, a division of Red Hat
> http://bill.burkecentral.com
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>



-- 
Rodrigo Sasaki
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20140515/0167d5b0/attachment.html 


More information about the keycloak-user mailing list