[keycloak-user] Roles Integration

[Rodrigo Sasaki]

Just to be more specific, our mapping here is really simple.

We have 1 table with the users, one with the roles, and a third one that
maps them both together.

Thank you for trying to help!


On Mon, Jun 16, 2014 at 12:44 PM, Rodrigo Sasaki <rodrigopsasaki at gmail.com>
wrote:

> They are all stored in a table on a RDBMS
>
>
> On Mon, Jun 16, 2014 at 12:34 PM, Bill Burke <bburke at redhat.com> wrote:
>
>> These 20 Million users: Are they stored in a RDBMS?  LDAP?
>>
>> On 6/16/2014 11:28 AM, Bill Burke wrote:
>> > Nice!  You will be a great reference for us.  We'll make it happen.
>> > Just remind us of this every time we're lax answering your questions :)
>> >
>> > On 6/16/2014 10:44 AM, Rodrigo Sasaki wrote:
>> >> We have about 15 roles and over 20 million users
>> >>
>> >>
>> >> On Mon, Jun 16, 2014 at 11:32 AM, Stian Thorgersen <stian at redhat.com
>> >> <mailto:stian at redhat.com>> wrote:
>> >>
>> >>
>> >>
>> >>      ----- Original Message -----
>> >>       > From: "Rodrigo Sasaki" <rodrigopsasaki at gmail.com
>> >>      <mailto:rodrigopsasaki at gmail.com>>
>> >>       > To: "Stian Thorgersen" <stian at redhat.com <mailto:
>> stian at redhat.com>>
>> >>       > Cc: keycloak-user at lists.jboss.org
>> >>      <mailto:keycloak-user at lists.jboss.org>
>> >>       > Sent: Monday, 16 June, 2014 3:27:43 PM
>> >>       > Subject: Re: [keycloak-user] Roles Integration
>> >>       >
>> >>       > That's an interesting suggestion, but how would I do that if
>> the
>> >>      databases
>> >>       > are very different?
>> >>       >
>> >>       > Just remembering that I want to integrate the user role
>> mappings,
>> >>      and not
>> >>       > just the roles themselves.
>> >>
>> >>      Makes sense, roles are not worth much if no users have mappings to
>> >>      them ;)
>> >>
>> >>       >
>> >>       > Should I create a JSON from my database following a specific
>> >>      format to
>> >>       > import it into Keycloak?
>> >>
>> >>      Yes, that's the idea. Roughly how many users and roles do you
>> have?
>> >>
>> >>       >
>> >>       >
>> >>       > On Mon, Jun 16, 2014 at 6:01 AM, Stian Thorgersen
>> >>      <stian at redhat.com <mailto:stian at redhat.com>> wrote:
>> >>       >
>> >>       > > The only way to do that at the moment would be to import the
>> >>      data into the
>> >>       > > Keycloak database. The easiest way to do this would be to
>> >>      export your
>> >>       > > database to json and import into Keycloak.
>> >>       > >
>> >>       > > If this is something you want to do, let me know and we can
>> >>      give you some
>> >>       > > instructions, maybe also an example, on how to do this.
>> >>       > >
>> >>       > > ----- Original Message -----
>> >>       > > > From: "Rodrigo Sasaki" <rodrigopsasaki at gmail.com
>> >>      <mailto:rodrigopsasaki at gmail.com>>
>> >>       > > > To: keycloak-user at lists.jboss.org
>> >>      <mailto:keycloak-user at lists.jboss.org>
>> >>       > > > Sent: Friday, 13 June, 2014 3:39:55 PM
>> >>       > > > Subject: [keycloak-user] Roles Integration
>> >>       > > >
>> >>       > > > Hi,
>> >>       > > >
>> >>       > > > I needed to migrate accounts from an old database to
>> >>      authenticate with
>> >>       > > > Keycloak, and I implemented my own provider of the
>> >>      Authentication SPI,
>> >>       > > which
>> >>       > > > worked fine.
>> >>       > > >
>> >>       > > > Now what should I do if I need to migrate the roles from
>> >>      those accounts
>> >>       > > > aswell? Is there a suggested flow that I should follow?
>> >>       > > >
>> >>       > > > Thanks,
>> >>       > > >
>> >>       > > > --
>> >>       > > > Rodrigo Sasaki
>> >>       > > >
>> >>       > > > _______________________________________________
>> >>       > > > keycloak-user mailing list
>> >>       > > > keycloak-user at lists.jboss.org
>> >>      <mailto:keycloak-user at lists.jboss.org>
>> >>       > > > https://lists.jboss.org/mailman/listinfo/keycloak-user
>> >>       > >
>> >>       >
>> >>       >
>> >>       >
>> >>       > --
>> >>       > Rodrigo Sasaki
>> >>       >
>> >>
>> >>
>> >>
>> >>
>> >> --
>> >> Rodrigo Sasaki
>> >>
>> >>
>> >> _______________________________________________
>> >> keycloak-user mailing list
>> >> keycloak-user at lists.jboss.org
>> >> https://lists.jboss.org/mailman/listinfo/keycloak-user
>> >>
>> >
>>
>> --
>> Bill Burke
>> JBoss, a division of Red Hat
>> http://bill.burkecentral.com
>> _______________________________________________
>> keycloak-user mailing list
>> keycloak-user at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>
>
>
>
> --
> Rodrigo Sasaki
>



-- 
Rodrigo Sasaki
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20140616/7262bac2/attachment-0001.html