<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 08/07/16 15:59, Matuszak, Eduard
wrote:<br>
</div>
<blockquote
cite="mid:61D077C6283D454FAFD06F6AC4AB74D723E00FF1@DEFTHW99EZ1MSX.ww931.my-it-solutions.net"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
<font face="Calibri" size="2"><span style="font-size:11pt;">
<div>Hello</div>
<div> </div>
<div>I have implemented a (JPA-based) user federation provider
that works pretty fine so far. We now want to be able to
load the link information to a federated id provider (like
google) from the external datasource into the Keycloak’s DB
by means of the user
federation provider, when the user is initially created in
the Keycloak DB via his first login (or via
user-synchronization). So far I could see, the user
federation SPI works with a UserModel class which does not
care about those attributes. Do you see any
chance to set such attributes in a
userfederation-implementation?</div>
<div> </div>
<div>One issue is, that keycloak’s user entries are deleted
when the userfederation provider fails to connect to the
federated resource (not found how to to deactivate this
behaviour so far). The user entry is recreated after the
next login succeeded (OK and
fine), but the link to the identity provider is lost (not
fine). The other issue is, that we want to administer
userattributes completey in the federated datasource to
reduce complexity of our datamanagement. </div>
</span></font></blockquote>
<font face="Calibri" size="2"><span style="font-size:11pt;"></span></font>
<font size="2"><font face="Calibri">It depends how you implement
methods "isValid" and "validateAndProxy" of your UserFederation
provider. If you fail to connect, you can possibly just return
the proxy of "local" UserModel, which was passed as an argument
to methods. But note that then all writes to this UserModel
won't be updated to your storage, but just to Keycloak DB.<br>
<br>
</font></font><br>
Btv. There is UserFederation SPI refactoring in progress<font
size="2"><font face="Calibri"> and there will be updates to this
SPI in next Keycloak versions (2.1 and laters)<br>
<br>
Marek</font></font>
<blockquote
cite="mid:61D077C6283D454FAFD06F6AC4AB74D723E00FF1@DEFTHW99EZ1MSX.ww931.my-it-solutions.net"
type="cite"><font face="Calibri" size="2"><span
style="font-size:11pt;">
<div> </div>
<div> </div>
<div><font face="Verdana" size="2"><span
style="font-size:9pt;">Best regards, Eduard Matuszak</span></font></div>
<div><font face="Verdana" size="2"><span
style="font-size:9pt;"> </span></font></div>
<div><img src="cid:part1.08010001.08060705@redhat.com"><font
size="2"><span style="font-size:9pt;"> </span></font></div>
<div><font color="#1F497D" face="Verdana" size="2"><span
style="font-size:9pt;"><b>Dr. Eduard Matuszak</b></span></font></div>
<div> </div>
<div><font face="Verdana" size="1"><span
style="font-size:8pt;">Worldline, an atos company</span></font></div>
<div><font face="Verdana" size="1"><span
style="font-size:8pt;">T +49 (211)399 398 63</span></font></div>
<div><font face="Verdana" size="1"><span
style="font-size:8pt;">M +49 (163)166 23 67</span></font></div>
<div><font face="Verdana" size="1"><span
style="font-size:8pt;">F +49(211) 399 22 430</span></font></div>
<div><a moz-do-not-send="true"
href="mailto:eduard.matuszak@atos.net"><font color="blue"
face="Verdana" size="1"><span style="font-size:8pt;"><u>eduard.matuszak@atos.net</u></span></font></a><font
color="#1F497D" face="Verdana" size="1"><span
style="font-size:8pt;"> </span></font></div>
<div><font face="Verdana" size="1"><span
style="font-size:8pt;">Max-Stromeyer-Straße 116</span></font></div>
<div><font face="Verdana" size="1"><span
style="font-size:8pt;">78467 Konstanz</span></font></div>
<div><font face="Verdana" size="1"><span
style="font-size:8pt;">Germany</span></font></div>
<div><a moz-do-not-send="true"
href="http://worldline.com/de/1/Home.html"><font
color="blue" face="Verdana" size="1"><span
style="font-size:8pt;"><u>de.worldline.com</u></span></font></a></div>
<div><a moz-do-not-send="true" href="http://worldline.jobs.de"><font
color="blue" face="Verdana" size="1"><span
style="font-size:8pt;"><u>worldline.jobs.de</u></span></font></a></div>
<div><a moz-do-not-send="true"
href="http://www.facebook.com/WorldlineKarriere"><font
color="blue" face="Verdana" size="1"><span
style="font-size:8pt;"><u>facebook.com/WorldlineKarriere</u></span></font></a></div>
<div><img src="cid:part6.04040006.06030607@redhat.com"><font
size="2"><span style="font-size:9pt;"> </span></font></div>
<div> </div>
<div> </div>
<div><font face="Arial" size="2"><span style="font-size:9pt;">Worldline
GmbH<br>
Geschäftsführer: Wolf Kunisch<br>
Aufsichtsratsvorsitzender: Christophe Duquenne<br>
Sitz der Gesellschaft: Frankfurt/Main<br>
Handelsregister: Frankfurt/Main HRB 40 417<br>
<br>
* * * * * * * * L E G A L D I S C L A I M E R * * * * *
* * *<br>
This e-mail and the documents attached are confidential
and intended solely for the addressee; it may also be
privileged. If you receive this e-mail by error, please
notify the sender immediately and destroy it. As its
integrity cannot be secured on the internet,
the Atos group liability cannot be triggered for the
message content. Although the sender endeavors to
maintain a computer virus-free network, the sender does
not warrant that this transmission is virus-free and
shall not be liable for any damages resulting
from any virus transmitted.<br>
* * * * * * * * L E G A L D I S C L A I M E R * * * * *
* * *</span></font></div>
<div><font color="#1F497D"> </font></div>
<div> </div>
<div> </div>
<div> </div>
</span></font>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
keycloak-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>
<a class="moz-txt-link-freetext" href="https://lists.jboss.org/mailman/listinfo/keycloak-user">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</body>
</html>