<div dir="ltr">I am very interested in importing the whole database. It seems to be the cleanest way to do what we want to do here, and migrate to keycloak completely.<div><br></div><div>Are there any guidelines on how to do this? Nonetheless I will look into the SPI you mentioned, might come in handy sometime.</div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, May 15, 2014 at 5:13 AM, Stian Thorgersen <span dir="ltr"><<a href="mailto:stian@redhat.com" target="_blank">stian@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">At the moment we have an Authentication SPI that will let you easily authenticate users with your existing database of users. The first time a new user logs in using this approach a user will be pulled in to the Keycloak database. There's no documentation for this feature yet, but look at the SPI at <a href="https://github.com/keycloak/keycloak/tree/master/authentication/authentication-api" target="_blank">https://github.com/keycloak/keycloak/tree/master/authentication/authentication-api</a> and the implementation that uses the Keycloak model itself to authenticate at <a href="https://github.com/keycloak/keycloak/tree/master/authentication/authentication-model" target="_blank">https://github.com/keycloak/keycloak/tree/master/authentication/authentication-model</a>.<br>
<br>
In the future we plan to provide a Sync SPI that will take this one step further and let you sync users (and roles) to/from an existing database.<br>
<br>
However, if you plan to completely replace your current authentication system the cleanest solution may be to import your current user database into Keycloak once and for all. If you're interested in this approach let me know.<br>
<div><div class="h5"><br>
----- Original Message -----<br>
> From: "Rodrigo Sasaki" <<a href="mailto:rodrigopsasaki@gmail.com">rodrigopsasaki@gmail.com</a>><br>
> To: <a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
> Sent: Wednesday, 14 May, 2014 8:52:07 PM<br>
> Subject: [keycloak-user] Migrating Users Database<br>
><br>
> Hi,<br>
><br>
> I'm trying to replace my current authentication system with Keycloak, but I<br>
> have one problem. I already have a database of users, populated with<br>
> millions of records, and I wanted to make it work with Keycloak.<br>
><br>
> What would be the best approach on this scenario? Should I migrate everything<br>
> to the Keycloak tables, or try to make Keycloak understand my current<br>
> database?<br>
><br>
> Is there any recommendation on this matter? And if there is, some explanation<br>
> or documentation?<br>
><br>
> Thanks!<br>
><br>
> --<br>
> Rodrigo Sasaki<br>
><br>
</div></div>> _______________________________________________<br>
> keycloak-user mailing list<br>
> <a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><font face="Times New Roman">Rodrigo Sasaki</font><div></div></div>
</div>