[keycloak-user] Keycloack Multi -Tenancy question

Marek Posolda mposolda at redhat.com
Tue Sep 24 08:21:25 EDT 2019


Hi,

there is no change in this area. Big number of realms can be still an 
issue. We plan some refactoring of the storage layer in near future (1-2 
years as very rough estimate) and that should help to address the 
multitenancy use-case among other things.

Marek

On 23. 09. 19 9:14, Litom Segal wrote:
> We are considering using Keycloack in a multi-tenant fashion.
> Each of our customer's account has its own users, and applications
> installed, and we also provide services API's consumed by various clients.
> We will have a large number of tenants.
> I found an open issue from 2017 that mentions that Keycloak may have some
> scalability issues with a large number of realms.
> https://issues.jboss.org/browse/KEYCLOAK-4593
>
> And also this thread  from 2016,
> https://lists.jboss.org/pipermail/keycloak-user/2016-October/008033.html,
> that states that "Keycloak was not designed to support multi-tenancy
> directly."..."In that regards we have never tested with high amounts of
> realms as we expect there to be few realms (up to 10 most likely)."
>
> I was wonder if there was any progress on the multi-tenancy use case, and
> are there any best practices on how to setup Keycloack to support it.
>
> On the other hand, is there any other approach to handle our use-case?
> Thanks,
> Litom
>




More information about the keycloak-user mailing list