Re: [keycloak-user] Roles Integration

From: "Rodrigo Sasaki" <rodrigopsasaki(a)gmail.com&gt; To: "Bill Burke" <bburke(a)redhat.com&gt; Cc: keycloak-user(a)lists.jboss.org Sent: Monday, 16 June, 2014 8:21:06 PM Subject: Re: [keycloak-user] Roles Integration Just to be more specific, our mapping here is really simple. We have 1 table with the users, one with the roles, and a third one that maps them both together. Thank you for trying to help! On Mon, Jun 16, 2014 at 12:44 PM, Rodrigo Sasaki < rodrigopsasaki(a)gmail.com > wrote: They are all stored in a table on a RDBMS On Mon, Jun 16, 2014 at 12:34 PM, Bill Burke < bburke(a)redhat.com > wrote: These 20 Million users: Are they stored in a RDBMS? LDAP? On 6/16/2014 11:28 AM, Bill Burke wrote: > Nice! You will be a great reference for us. We'll make it happen. > Just remind us of this every time we're lax answering your questions :) > > On 6/16/2014 10:44 AM, Rodrigo Sasaki wrote: >> We have about 15 roles and over 20 million users >> >> >> On Mon, Jun 16, 2014 at 11:32 AM, Stian Thorgersen < stian(a)redhat.com >> <mailto: stian(a)redhat.com >> wrote: >> >> >> >> ----- Original Message ----- >> > From: "Rodrigo Sasaki" < rodrigopsasaki(a)gmail.com >> <mailto: rodrigopsasaki(a)gmail.com >> >> > To: "Stian Thorgersen" < stian(a)redhat.com <mailto: stian(a)redhat.com >> >> > Cc: keycloak-user(a)lists.jboss.org >> <mailto: keycloak-user(a)lists.jboss.org > >> > Sent: Monday, 16 June, 2014 3:27:43 PM >> > Subject: Re: [keycloak-user] Roles Integration >> > >> > That's an interesting suggestion, but how would I do that if the >> databases >> > are very different? >> > >> > Just remembering that I want to integrate the user role mappings, >> and not >> > just the roles themselves. >> >> Makes sense, roles are not worth much if no users have mappings to >> them ;) >> >> > >> > Should I create a JSON from my database following a specific >> format to >> > import it into Keycloak? >> >> Yes, that's the idea. Roughly how many users and roles do you have? >> >> > >> > >> > On Mon, Jun 16, 2014 at 6:01 AM, Stian Thorgersen >> < stian(a)redhat.com <mailto: stian(a)redhat.com >> wrote: >> > >> > > The only way to do that at the moment would be to import the >> data into the >> > > Keycloak database. The easiest way to do this would be to >> export your >> > > database to json and import into Keycloak. >> > > >> > > If this is something you want to do, let me know and we can >> give you some >> > > instructions, maybe also an example, on how to do this. >> > > >> > > ----- Original Message ----- >> > > > From: "Rodrigo Sasaki" < rodrigopsasaki(a)gmail.com >> <mailto: rodrigopsasaki(a)gmail.com >> >> > > > To: keycloak-user(a)lists.jboss.org >> <mailto: keycloak-user(a)lists.jboss.org > >> > > > Sent: Friday, 13 June, 2014 3:39:55 PM >> > > > Subject: [keycloak-user] Roles Integration >> > > > >> > > > Hi, >> > > > >> > > > I needed to migrate accounts from an old database to >> authenticate with >> > > > Keycloak, and I implemented my own provider of the >> Authentication SPI, >> > > which >> > > > worked fine. >> > > > >> > > > Now what should I do if I need to migrate the roles from >> those accounts >> > > > aswell? Is there a suggested flow that I should follow? >> > > > >> > > > Thanks, >> > > > >> > > > -- >> > > > Rodrigo Sasaki >> > > > >> > > > _______________________________________________ >> > > > keycloak-user mailing list >> > > > keycloak-user(a)lists.jboss.org >> <mailto: keycloak-user(a)lists.jboss.org > >> > > > https://lists.jboss.org/mailman/listinfo/keycloak-user >> > > >> > >> > >> > >> > -- >> > Rodrigo Sasaki >> > >> >> >> >> >> -- >> Rodrigo Sasaki >> >> >> _______________________________________________ >> keycloak-user mailing list >> keycloak-user(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/keycloak-user >> > -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user -- Rodrigo Sasaki -- Rodrigo Sasaki _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user