<div dir="ltr">Just to be more specific, our mapping here is really simple.<div><br></div><div>We have 1 table with the users, one with the roles, and a third one that maps them both together.</div><div><br></div><div>Thank you for trying to help!</div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Jun 16, 2014 at 12:44 PM, Rodrigo Sasaki <span dir="ltr"><<a href="mailto:rodrigopsasaki@gmail.com" target="_blank">rodrigopsasaki@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">They are all stored in a table on a RDBMS</div><div class="gmail_extra"><div><div class="h5"><br><br><div class="gmail_quote">
On Mon, Jun 16, 2014 at 12:34 PM, Bill Burke <span dir="ltr"><<a href="mailto:bburke@redhat.com" target="_blank">bburke@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">These 20 Million users: Are they stored in a RDBMS? LDAP?<br>
<div><div><br>
On 6/16/2014 11:28 AM, Bill Burke wrote:<br>
> Nice! You will be a great reference for us. We'll make it happen.<br>
> Just remind us of this every time we're lax answering your questions :)<br>
><br>
> On 6/16/2014 10:44 AM, Rodrigo Sasaki wrote:<br>
>> We have about 15 roles and over 20 million users<br>
>><br>
>><br>
>> On Mon, Jun 16, 2014 at 11:32 AM, Stian Thorgersen <<a href="mailto:stian@redhat.com" target="_blank">stian@redhat.com</a><br>
>> <mailto:<a href="mailto:stian@redhat.com" target="_blank">stian@redhat.com</a>>> wrote:<br>
>><br>
>><br>
>><br>
>> ----- Original Message -----<br>
>> > From: "Rodrigo Sasaki" <<a href="mailto:rodrigopsasaki@gmail.com" target="_blank">rodrigopsasaki@gmail.com</a><br>
>> <mailto:<a href="mailto:rodrigopsasaki@gmail.com" target="_blank">rodrigopsasaki@gmail.com</a>>><br>
>> > To: "Stian Thorgersen" <<a href="mailto:stian@redhat.com" target="_blank">stian@redhat.com</a> <mailto:<a href="mailto:stian@redhat.com" target="_blank">stian@redhat.com</a>>><br>
>> > Cc: <a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
>> <mailto:<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a>><br>
>> > Sent: Monday, 16 June, 2014 3:27:43 PM<br>
>> > Subject: Re: [keycloak-user] Roles Integration<br>
>> ><br>
>> > That's an interesting suggestion, but how would I do that if the<br>
>> databases<br>
>> > are very different?<br>
>> ><br>
>> > Just remembering that I want to integrate the user role mappings,<br>
>> and not<br>
>> > just the roles themselves.<br>
>><br>
>> Makes sense, roles are not worth much if no users have mappings to<br>
>> them ;)<br>
>><br>
>> ><br>
>> > Should I create a JSON from my database following a specific<br>
>> format to<br>
>> > import it into Keycloak?<br>
>><br>
>> Yes, that's the idea. Roughly how many users and roles do you have?<br>
>><br>
>> ><br>
>> ><br>
>> > On Mon, Jun 16, 2014 at 6:01 AM, Stian Thorgersen<br>
>> <<a href="mailto:stian@redhat.com" target="_blank">stian@redhat.com</a> <mailto:<a href="mailto:stian@redhat.com" target="_blank">stian@redhat.com</a>>> wrote:<br>
>> ><br>
>> > > The only way to do that at the moment would be to import the<br>
>> data into the<br>
>> > > Keycloak database. The easiest way to do this would be to<br>
>> export your<br>
>> > > database to json and import into Keycloak.<br>
>> > ><br>
>> > > If this is something you want to do, let me know and we can<br>
>> give you some<br>
>> > > instructions, maybe also an example, on how to do this.<br>
>> > ><br>
>> > > ----- Original Message -----<br>
>> > > > From: "Rodrigo Sasaki" <<a href="mailto:rodrigopsasaki@gmail.com" target="_blank">rodrigopsasaki@gmail.com</a><br>
>> <mailto:<a href="mailto:rodrigopsasaki@gmail.com" target="_blank">rodrigopsasaki@gmail.com</a>>><br>
>> > > > To: <a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
>> <mailto:<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a>><br>
>> > > > Sent: Friday, 13 June, 2014 3:39:55 PM<br>
>> > > > Subject: [keycloak-user] Roles Integration<br>
>> > > ><br>
>> > > > Hi,<br>
>> > > ><br>
>> > > > I needed to migrate accounts from an old database to<br>
>> authenticate with<br>
>> > > > Keycloak, and I implemented my own provider of the<br>
>> Authentication SPI,<br>
>> > > which<br>
>> > > > worked fine.<br>
>> > > ><br>
>> > > > Now what should I do if I need to migrate the roles from<br>
>> those accounts<br>
>> > > > aswell? Is there a suggested flow that I should follow?<br>
>> > > ><br>
>> > > > Thanks,<br>
>> > > ><br>
>> > > > --<br>
>> > > > Rodrigo Sasaki<br>
>> > > ><br>
>> > > > _______________________________________________<br>
>> > > > keycloak-user mailing list<br>
>> > > > <a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
>> <mailto:<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a>><br>
>> > > > <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
>> > ><br>
>> ><br>
>> ><br>
>> ><br>
>> > --<br>
>> > Rodrigo Sasaki<br>
>> ><br>
>><br>
>><br>
>><br>
>><br>
>> --<br>
>> Rodrigo Sasaki<br>
>><br>
>><br>
>> _______________________________________________<br>
>> keycloak-user mailing list<br>
>> <a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
>> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
>><br>
><br>
<br>
--<br>
Bill Burke<br>
JBoss, a division of Red Hat<br>
<a href="http://bill.burkecentral.com" target="_blank">http://bill.burkecentral.com</a><br>
_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div></div></div><span class="HOEnZb"><font color="#888888">-- <br><div dir="ltr"><font face="Times New Roman">Rodrigo Sasaki</font><div></div></div>
</font></span></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><font face="Times New Roman">Rodrigo Sasaki</font><div></div></div>
</div>