Maybe you can use the admin user from master realm (and not set any password policies in master realm), but all your other users will be in some other "business" realms, which will have password policy. Is it work to have different realms? Marek On 15/12/16 19:10, marcelo.miura wrote: > Hi, > > I was wondering if that's possible to exclude a user from the password > policies set on keycloak. > Problem: I have an admin user used on my API to create new users, reset > password and exclude users from keycloak. But as there's a password > policy to expire the password within 30 days, this user cannot be used > until we reset his password manually. > > Any ideas? > > Thanks in advance. > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user

You can make use of partial imports. Take a look here: https://keycloak.gitbooks.io/server-adminstration-guide/content/topics/ex... On Thu, Dec 15, 2016 at 5:59 PM, marcelo.miura <marcelo.miura(a)gdcommunity.co.uk&gt; wrote: > Thanks for your answer. > > Unfortunately, all my users are currently on master. Is there a way to > change all my users to another realm? > > Would that work if I try to export and import it to another realm? > > > Marcelo > > > On 15/12/2016 17:08, Marek Posolda wrote: >> Maybe you can use the admin user from master realm (and not set any >> password policies in master realm), but all your other users will be >> in some other "business" realms, which will have password policy. Is >> it work to have different realms? >> >> Marek >> >> >> On 15/12/16 19:10, marcelo.miura wrote: >>> Hi, >>> >>> I was wondering if that's possible to exclude a user from the password >>> policies set on keycloak. >>> Problem: I have an admin user used on my API to create new users, reset >>> password and exclude users from keycloak. But as there's a password >>> policy to expire the password within 30 days, this user cannot be used >>> until we reset his password manually. >>> >>> Any ideas? >>> >>> Thanks in advance. >>> _______________________________________________ >>> keycloak-user mailing list >>> keycloak-user(a)lists.jboss.org >>> https://lists.jboss.org/mailman/listinfo/keycloak-user >> > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user

Hmmm, it looks like we have a similar bug https://issues.jboss.org/browse/KEYCLOAK-3657. Is that what happen with your import, but instead of role ids it changes user ids? On Thu, Dec 15, 2016 at 10:46 PM, marcelo.miura <marcelo.miura(a)gdcommunity.co.uk&gt; wrote: > Thanks! > > I tried to do that, but when I imported the users to the new realm it > changed the user ids. > > Am I missing any step here? > > > > On 15/12/2016 18:09, Bruno Oliveira wrote: >> You can make use of partial imports. Take a look here: >> >> https://keycloak.gitbooks.io/server-adminstration-guide/content/topics/ex... >> >> On Thu, Dec 15, 2016 at 5:59 PM, marcelo.miura >> <marcelo.miura(a)gdcommunity.co.uk&gt; wrote: >>> Thanks for your answer. >>> >>> Unfortunately, all my users are currently on master. Is there a way to >>> change all my users to another realm? >>> >>> Would that work if I try to export and import it to another realm? >>> >>> >>> Marcelo >>> >>> >>> On 15/12/2016 17:08, Marek Posolda wrote: >>>> Maybe you can use the admin user from master realm (and not set any >>>> password policies in master realm), but all your other users will be >>>> in some other "business" realms, which will have password policy. Is >>>> it work to have different realms? >>>> >>>> Marek >>>> >>>> >>>> On 15/12/16 19:10, marcelo.miura wrote: >>>>> Hi, >>>>> >>>>> I was wondering if that's possible to exclude a user from the password >>>>> policies set on keycloak. >>>>> Problem: I have an admin user used on my API to create new users, reset >>>>> password and exclude users from keycloak. But as there's a password >>>>> policy to expire the password within 30 days, this user cannot be used >>>>> until we reset his password manually. >>>>> >>>>> Any ideas? >>>>> >>>>> Thanks in advance. >>>>> _______________________________________________ >>>>> keycloak-user mailing list >>>>> keycloak-user(a)lists.jboss.org >>>>> https://lists.jboss.org/mailman/listinfo/keycloak-user >>>> >>> _______________________________________________ >>> keycloak-user mailing list >>> keycloak-user(a)lists.jboss.org >>> https://lists.jboss.org/mailman/listinfo/keycloak-user >> >>

Please file a Jira, describing your setup and the steps to reproduce. On Fri, Dec 16, 2016 at 9:54 AM, marcelo.miura <marcelo.miura(a)gdcommunity.co.uk&gt; wrote: > That's correct, yes! > > Any ideas? > > > > On 16/12/2016 09:50, Bruno Oliveira wrote: >> Hmmm, it looks like we have a similar bug >> https://issues.jboss.org/browse/KEYCLOAK-3657. >> >> Is that what happen with your import, but instead of role ids it >> changes user ids? >> >> On Thu, Dec 15, 2016 at 10:46 PM, marcelo.miura >> <marcelo.miura(a)gdcommunity.co.uk&gt; wrote: >>> Thanks! >>> >>> I tried to do that, but when I imported the users to the new realm it >>> changed the user ids. >>> >>> Am I missing any step here? >>> >>> >>> >>> On 15/12/2016 18:09, Bruno Oliveira wrote: >>>> You can make use of partial imports. Take a look here: >>>> >>>> >>>> https://keycloak.gitbooks.io/server-adminstration-guide/content/topics/ex... >>>> >>>> On Thu, Dec 15, 2016 at 5:59 PM, marcelo.miura >>>> <marcelo.miura(a)gdcommunity.co.uk&gt; wrote: >>>>> Thanks for your answer. >>>>> >>>>> Unfortunately, all my users are currently on master. Is there a way to >>>>> change all my users to another realm? >>>>> >>>>> Would that work if I try to export and import it to another realm? >>>>> >>>>> >>>>> Marcelo >>>>> >>>>> >>>>> On 15/12/2016 17:08, Marek Posolda wrote: >>>>>> Maybe you can use the admin user from master realm (and not set any >>>>>> password policies in master realm), but all your other users will be >>>>>> in some other "business" realms, which will have password policy. Is >>>>>> it work to have different realms? >>>>>> >>>>>> Marek >>>>>> >>>>>> >>>>>> On 15/12/16 19:10, marcelo.miura wrote: >>>>>>> Hi, >>>>>>> >>>>>>> I was wondering if that's possible to exclude a user from the >>>>>>> password >>>>>>> policies set on keycloak. >>>>>>> Problem: I have an admin user used on my API to create new users, >>>>>>> reset >>>>>>> password and exclude users from keycloak. But as there's a password >>>>>>> policy to expire the password within 30 days, this user cannot be >>>>>>> used >>>>>>> until we reset his password manually. >>>>>>> >>>>>>> Any ideas? >>>>>>> >>>>>>> Thanks in advance. >>>>>>> _______________________________________________ >>>>>>> keycloak-user mailing list >>>>>>> keycloak-user(a)lists.jboss.org >>>>>>> https://lists.jboss.org/mailman/listinfo/keycloak-user >>>>>> >>>>> _______________________________________________ >>>>> keycloak-user mailing list >>>>> keycloak-user(a)lists.jboss.org >>>>> https://lists.jboss.org/mailman/listinfo/keycloak-user >>>> >>>> >>