I did check the admin-cli JAR but it's not clear how to add roles and users, or if it's even implemented (I did check the REST API and there's endpoints for that).

Thank you very much for clarifying,
Pires

On Wed, Jul 20, 2016 at 2:52 PM Stian Thorgersen <sthorger@redhat.com> wrote:
Yep, take a look at https://keycloak.gitbooks.io/server-developer-guide/content/topics/admin-rest-api.html

On 20 July 2016 at 15:33, Paulo Pires <pires@littlebits.cc> wrote:

More than 150k. Is there a Java library for the REST api?


On Jul 20, 2016 13:56, "Stian Thorgersen" <sthorger@redhat.com> wrote:
Depending on the amount of users I'd use either partial import through the admin console (if you don't have more than a thousand or so users) or use the admin REST endpoints if you have quite a lot of users.

On 20 July 2016 at 11:52, Paulo Pires <pires@littlebits.cc> wrote:
Hi all,

I'm in the process of migrating from an in-house user-role storage to Keycloak and I'm looking for programmatic (Java) ways to migrate all current users to the new storage. And I need your help to figure out the best approach.

At first, when reading KC documentation, I believed I could easily achieve this by implementing a User Federation provider but after diving a little more into it, and looking for examples, I can't see a way to migrate all users on-demand but simply one user at a time, possible during log-in.

Next, I tried and look into ways, such as admin-cli, REST, etc but nothing strikes me as the solution to use.

Here's what I was hoping to deliver:
* Get all roles and users from my soon-to-be deprecated storage, e.g. MySQL tables
* Add roles to KC
* Iterate users and add user to KC + map roles + update password hashes (here I know I need to implement a HashProvider)

Any hints will be appreciated!

Pires

_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user