[keycloak-user] Migrating Users Database

Rodrigo Sasaki rodrigopsasaki at gmail.com
Thu May 15 14:30:00 EDT 2014


By the way, do you have further information regarding that SPI you
mentioned?

I was looking at the source code but I couldn't derive much from it, I
don't know exactly how I should implement my own provider, and how do I
tell keycloak to use mine instead of its own.


On Thu, May 15, 2014 at 11:05 AM, Rodrigo Sasaki
<rodrigopsasaki at gmail.com>wrote:

> That's quite alright at the moment.
>
> We have seen the roadmap and if it stays around the announced dates, there
> shouldn't be a problem for us here.
>
>
> On Thu, May 15, 2014 at 11:03 AM, Bill Burke <bburke at redhat.com> wrote:
>
>> FYI, Keycloak will be very slow until we start our performance work
>> (scheduled for Beta-2).  Right now, every login/logout/token action is
>> all DB hits.  We don't cache anything at the moment!
>>
>> On 5/15/2014 7:02 AM, Rodrigo Sasaki wrote:
>> > I am very interested in importing the whole database. It seems to be the
>> > cleanest way to do what we want to do here, and migrate to keycloak
>> > completely.
>> >
>> > Are there any guidelines on how to do this? Nonetheless I will look into
>> > the SPI you mentioned, might come in handy sometime.
>> >
>> >
>> > On Thu, May 15, 2014 at 5:13 AM, Stian Thorgersen <stian at redhat.com
>> > <mailto:stian at redhat.com>> wrote:
>> >
>> >     At the moment we have an Authentication SPI that will let you easily
>> >     authenticate users with your existing database of users. The first
>> >     time a new user logs in using this approach a user will be pulled in
>> >     to the Keycloak database. There's no documentation for this feature
>> >     yet, but look at the SPI at
>> >
>> https://github.com/keycloak/keycloak/tree/master/authentication/authentication-api
>> >     and the implementation that uses the Keycloak model itself to
>> >     authenticate at
>> >
>> https://github.com/keycloak/keycloak/tree/master/authentication/authentication-model
>> .
>> >
>> >     In the future we plan to provide a Sync SPI that will take this one
>> >     step further and let you sync users (and roles) to/from an existing
>> >     database.
>> >
>> >     However, if you plan to completely replace your current
>> >     authentication system the cleanest solution may be to import your
>> >     current user database into Keycloak once and for all. If you're
>> >     interested in this approach let me know.
>> >
>> >     ----- Original Message -----
>> >      > From: "Rodrigo Sasaki" <rodrigopsasaki at gmail.com
>> >     <mailto:rodrigopsasaki at gmail.com>>
>> >      > To: keycloak-user at lists.jboss.org
>> >     <mailto:keycloak-user at lists.jboss.org>
>> >      > Sent: Wednesday, 14 May, 2014 8:52:07 PM
>> >      > Subject: [keycloak-user] Migrating Users Database
>> >      >
>> >      > Hi,
>> >      >
>> >      > I'm trying to replace my current authentication system with
>> >     Keycloak, but I
>> >      > have one problem. I already have a database of users, populated
>> with
>> >      > millions of records, and I wanted to make it work with Keycloak.
>> >      >
>> >      > What would be the best approach on this scenario? Should I
>> >     migrate everything
>> >      > to the Keycloak tables, or try to make Keycloak understand my
>> current
>> >      > database?
>> >      >
>> >      > Is there any recommendation on this matter? And if there is, some
>> >     explanation
>> >      > or documentation?
>> >      >
>> >      > Thanks!
>> >      >
>> >      > --
>> >      > Rodrigo Sasaki
>> >      >
>> >      > _______________________________________________
>> >      > keycloak-user mailing list
>> >      > keycloak-user at lists.jboss.org <mailto:
>> keycloak-user at lists.jboss.org>
>> >      > https://lists.jboss.org/mailman/listinfo/keycloak-user
>> >
>> >
>> >
>> >
>> > --
>> > Rodrigo Sasaki
>> >
>> >
>> > _______________________________________________
>> > keycloak-user mailing list
>> > keycloak-user at lists.jboss.org
>> > https://lists.jboss.org/mailman/listinfo/keycloak-user
>> >
>>
>> --
>> Bill Burke
>> JBoss, a division of Red Hat
>> http://bill.burkecentral.com
>> _______________________________________________
>> keycloak-user mailing list
>> keycloak-user at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>
>
>
>
> --
> Rodrigo Sasaki
>



-- 
Rodrigo Sasaki
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20140515/0539bac3/attachment-0001.html 


More information about the keycloak-user mailing list