Re: [keycloak-dev] Import users from new User Federation

On Aug 18, 2016, at 2:30 PM, Bill Burke <bburke(a)redhat.com&gt; wrote: On 8/18/16 4:59 AM, Stian Thorgersen wrote: > Bill, > > Are you planing to have an option to allow import of users with the > new user federation SPI? I'm not convinced we should completely remove > this option. > The only callback that does not exist in the new SPI is validateAndProxy(). With the current federation SPI, the developer implements everything themselves for import. There are no synchronization APIs/SPIs either. > Some use-cases I could imagine: > > * Allow users to authenticate even if LDAP server is down Our current LDAP provider will not work if LDAP is down, even with the import :) > * Allow migrating users away from LDAP We can do anything we want for our LDAP implementation. This doesn't mean that the SPI should have special support methods and interfaces for synchronization and import. Bill _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-dev