Does keycloak support the ability to create a "template" of a realm that
can be imported to create a new realm (with a new name and description).
The idea is that we want to be able to quickly provision new realms (think:
a "realm" per unique organization) without having to recreate the
associated clients, roles, scopes, policies, permissions, etc. This will
allow us to have all of the supported realms have the same structure and
rules, but remain in completely isolated namespaces and have unique users
and resource instances.
I have been able to sort-of achieve this using the json created by the
"Partial export" (including groups, roles, and clients) and then editing
the json to change the name of the realm and remove all of the unique "id"
fields to avoid DB conflicts upon import, but that still leaves out the
resource authorization settings (though I suppose those can be exported and
imported as a 2nd step).
thanks,
Wyllys Ingersoll
Show replies by date