[keycloak-user] Can Keycloak simulate LDAP server?

[Valerij Timofeev]

The scenario where users are created in Keycloak and then synchronized to
LDAP is clear. It is good documented.
But what about scenario, if LDAP server setup should occur months later
after Keycloak setup?
Would it be possible to synchronize existing Keycloak users including their
password to LDAP for example on successful login?

2015-10-15 12:42 GMT+02:00 Marek Posolda <mposolda at redhat.com>:

> In that case, I would likely use Keycloak with LDAP federation provider,
> which will point to some LDAP server in your environment. KC Federation
> provider needs to be declared with editMode "WRITABLE", so all users
> created through Keycloak will be synced to LDAP server as well including
> their password. Then the legacy product compatible just with LDAP will
> authenticate users against this LDAP server.
>
> Marek
>
>
> On 15/10/15 11:41, Valerij Timofeev wrote:
>
> Hi all,
>
> we are interested to know if it is possible to authenticate users of pure
> LDAP client against Keycloak?
>
> Why? We are planning to migrate legacy user storage to Keycloak and we'd
> like to avoid dead end if for example some product (e.g. SaaS) does not
> support user authentication against Keycloak, but does against standard
> LDAP server.
>
> If it is impossible, has anybody succeeded to implement reverted direction
> of user federation synchronization (all users data from Keycloak should be
> copied to a fresh LDAP server installation)?
>
> Answers to these questions may be decisive for the Keycloak usage in our
> organization.
>
> Thank you in advance
>
> Valerij Timofeev
> Software Engineer
> Trusted Shops GmbH
>
>
> _______________________________________________
> keycloak-user mailing listkeycloak-user at lists.jboss.orghttps://lists.jboss.org/mailman/listinfo/keycloak-user
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20151015/4520dc23/attachment.html