Re: [keycloak-user] Will Keycloak scale to handle hundreads of LDAP integrations?
Are you planning to have a single realm?
The way users are retrieved when there is multiple LDAP servers is
currently quite limited. It will simply search through them in order until
the user is found. Once found a user with the link to the correct LDAP will
be setup. With hundreds of LDAP connections this will most likely be rather
slow.
It's also not a scenario we've tested so you would have to test and
experiment with this yourself.
On 14 June 2018 at 14:30, Filipe Abrahao <lfa(a)doodle.com> wrote:
Hi everyone,
I work at Doodle, an online platform to help people to schedule meetings
and social events, we have around 28m people that use our product every
month and we are in the process of splitting our monolith.
We have been experimenting with Keycloak as our auth service, and so far we
are pretty happy with it, we just making sure it fulfils all our
requirements, but we have one that we are not sure if it would work with
Keycloak:
Some of our bigger users, like universities and big corporations require to
manage their users via LDAP. We know that Keycloak can integrate with LDAP.
But my question is if creating one LDAP configuration for each client is
the right way to do it.
If we have to configure one LDAP integration for each client that requires
it, we potentially will end-up with hundreds (perhaps thousands) of them.
Will it scale? Will Keycloak be able to handle that?
many thanks,
Filipe A
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user