[keycloak-dev] Remove IDM entirely or keep Picketlink federation provider?

[Marek Posolda]

Not sure if we already decide about $subject. I am in the middle of 
forking LDAP from PLIDM and removing PLIDM dependency. Now I wonder if I 
should:

1) Remove PLIDM dependency entirely from whole codebase

2) Create the module with Picketlink FederationProvider, which won't be 
packaged in distribution by default. This can be separate package used 
on demand by EAP customers to migrate their PLIDM users into Keycloak 
users. This module will be the only place, which will be still dependent 
on PLIDM, but since it won't be in distribution by default, we can 
remove PLIDM dependency from appliance and war distributions.

The reason I am asking is, that current LDAPFederationProvider can be 
quite easily converted into PicketlinkFederationProvider. But limitation 
is, that it will migrate just users. It won't migrate IDM roles into 
Keycloak roles..

Or should I simply go with (1) and don't care about the migration for now?

Marek