i'm not sure if i'm understanding your requirement exactly but it sounds
similar to identity broker. this allows your clients to integrate to a
single keycloak instance or realm which acts as broker for one or more
identity providers.
On Thu, Mar 15, 2018 at 3:05 PM, Matthew Beliveau <mbelivea(a)redhat.com>
wrote:
Hello,
I have five VMs running, one with an Apache protected app connected to a
keycloak (Keycloak A) server through mod_auth_mellon. This Keycloak Server
is connected to an IPA server (IPA A). I also have another
Keycloak(keycloak B) server connected to another IPA server(IPA B). What I
want to happen is when I log in to the Apache app, I want the first
keycloak(A) server to connect to the second keycloak(B) server and obtain
the users info on the IPA Server(B). Then I want to user's info to be
updated on the first IPA server(A) and if the user doesn't exist then I
want the user to be made. I want to know if that is possible right now to
do and if it isn't how should I go about achieving my goal. I also want to
know if it involves writing a plug in, where in the keycloak or IPA code
should I look.
Any help would be gratefully appreciated, and sorry if this is the wrong
place to ask this question.
Thank you,
Matthew Beliveau
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user