<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hi Orestis,<br>
<br>
the alternative is also to use our admin REST api directly and
invoke REST endpoints for create/update client directly without
using our admin console.<br>
<br>
Marek<br>
<br>
On 30.6.2015 14:30, Orestis Tsakiridis wrote:<br>
</div>
<blockquote
cite="mid:CABjN769e+b1aYHyP-ByNNw66FE26CDR+Bx_N7z2hhaQntamwxg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>Hi Marek,<br>
<br>
</div>
my comments inline:<br>
<div>
<div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, Jun 30, 2015 at 2:44 PM,
Marek Posolda <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:mposolda@redhat.com" target="_blank">mposolda@redhat.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>How much clients you have in mind? <br>
<br>
</div>
</div>
</blockquote>
<div><br>
</div>
<div>I guess 100-1000 would be realistic. But more may
come later. <br>
</div>
<div> </div>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div> Theoretically there is no any limit. At least
at database level. Fact is that we didn't try to
test admin console UI with very big number of
clients. Feel free to create JIRA if you're seeing
issues.<br>
<br>
</div>
</div>
</blockquote>
<div><br>
</div>
<div>Thanks. Before doing this, i just want to be sure
that i'm on the right path and there are no
alternatives. For instance, i've also considered
creating a new realm per machine but this won't work
either. A user's identity should be global but also
have access to selected machine(s). I think that
concept can work only within a single realm.</div>
<div> </div>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div> Another approach is to design your deployment
so the number of clients is not too big. For
example when adding new "machine" you can reuse
already created clients (not sure if it's the
approach which works for you, just a possible
hint...)<br>
</div>
</div>
</blockquote>
<div> <br>
Unfortunately that won't work either. :-(. We need
those clients and their respective machines to be in
place and operational.<br>
</div>
<div> </div>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div> Marek
<div>
<div class="h5"><br>
</div>
</div>
</div>
</div>
</blockquote>
<div><br>
<br>
</div>
<div>Anyway, thanks for the help Marek!<br>
<br>
<br>
</div>
<div>Regards<br>
<br>
</div>
<div>Orestis<br>
</div>
<div> <br>
<br>
<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>
<div>
<div class="h5"> <br>
On 30.6.2015 09:50, Orestis Tsakiridis wrote:<br>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div class="h5">
<div dir="ltr">
<div>
<div>Hi all,<br>
<br>
</div>
Is there a limit in the maximum number of
clients/applications in single realm
supported by keycloak? <br>
<br>
I can see that the keycloak admin UI is
not built with a big number in mind. For
instance, when assigning "Client roles" to
a realm user there is a dropdown with all
clients/applications in the realm. I guess
this shouldn't grow too big to be usuable.<br>
<br>
</div>
I'm working on a scenario where i need to
implement authorization in a system where
new machines (and their respective keycloak
applications) will be added on the fly. So
i'm worying about what will happen if the
number starts to grow.<br>
<div>
<div><br>
<br>
</div>
<div>Thanks<br>
<br>
<br>
</div>
<div><br>
</div>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
</div>
</div>
<pre>_______________________________________________
keycloak-user mailing list
<a moz-do-not-send="true" href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a>
<a moz-do-not-send="true" href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</div>
<br>
_______________________________________________<br>
keycloak-user mailing list<br>
<a moz-do-not-send="true"
href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<a moz-do-not-send="true"
href="https://lists.jboss.org/mailman/listinfo/keycloak-user"
rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</blockquote>
<br>
</body>
</html>