[keycloak-user] Admin's password override

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 All, While it makes sense to ship with a default password for the admin user on Keycloak distributions, as it's reasonable to think that the admin is going to explore Keycloak right away, this expectation is not true for the situation where Keycloak is embedded into another product. I can imagine that the first time an "admin" will need to log into Keycloak's admin console when embedded into another product would be days/weeks after the initial setup. That said, I'm collecting ideas on how to solve this issue for Hawkular. The first and most intuitive solution I can think of is to import an users JSON file on the first boot, which would (in theory, I haven't tested) override the password for admin. This password would need to be stored in clear text somewhere in the system, but I believe the pros/cons are worth on this scenario (as this password will be valid only until the first login, so, days/weeks "only"). Do you have better ideas? Or feedback on whether the mentioned approach would/wouldn't work? Or strong arguments against doing that? - - Juca.