<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Not sure what you mean. If the provider is not deployed?<br>
</p>
<br>
<div class="moz-cite-prefix">On 8/3/16 9:00 PM, Josh Cain wrote:<br>
</div>
<blockquote
cite="mid:CA+z0A8ANMJMFQqV-iKL5-eLtDx4jy8WhQgcj-RgzkYSmMCFVJw@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>Hi all,<br>
<br>
</div>
I'm using a Keycloak impementation in which the majority of
our users come from a UserFederationProvider. However, I'd
ideally like to be able to fall-back to the Keycloak database
when this provider is unavailable. Is it possible to do so?<br>
<br>
</div>
I looked around at the codebase and UserFederationManager seems
to be where I'd like to change (namely the <a
moz-do-not-send="true"
href="https://github.com/keycloak/keycloak/blob/ec6b81e42dc8cb7abd9d06571a732cb3c40a5b03/server-spi/src/main/java/org/keycloak/models/UserFederationManager.java#L143">validateAndProxyUser</a>
method). Is there any way to extend this with our own
behavior? Looks like that particular implementation is
hard-coded into the KeycloakSession interface.<br>
<div>
<div>
<div><br clear="all">
<div>
<div class="gmail_signature"
data-smartmail="gmail_signature">
<div dir="ltr"><span>
<div>
<div>Josh Cain | Software Applications Engineer<br>
</div>
<i>Identity and Access Management</i><br>
</div>
<b>Red Hat</b><br>
+1 843-737-1735<br>
</span></div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
keycloak-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>
<a class="moz-txt-link-freetext" href="https://lists.jboss.org/mailman/listinfo/keycloak-user">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</body>
</html>