[keycloak-user] Migrating Users Database
Rodrigo Sasaki
rodrigopsasaki at gmail.com
Thu May 15 10:05:42 EDT 2014
That's quite alright at the moment.
We have seen the roadmap and if it stays around the announced dates, there
shouldn't be a problem for us here.
On Thu, May 15, 2014 at 11:03 AM, Bill Burke <bburke at redhat.com> wrote:
> FYI, Keycloak will be very slow until we start our performance work
> (scheduled for Beta-2). Right now, every login/logout/token action is
> all DB hits. We don't cache anything at the moment!
>
> On 5/15/2014 7:02 AM, Rodrigo Sasaki wrote:
> > I am very interested in importing the whole database. It seems to be the
> > cleanest way to do what we want to do here, and migrate to keycloak
> > completely.
> >
> > Are there any guidelines on how to do this? Nonetheless I will look into
> > the SPI you mentioned, might come in handy sometime.
> >
> >
> > On Thu, May 15, 2014 at 5:13 AM, Stian Thorgersen <stian at redhat.com
> > <mailto:stian at redhat.com>> wrote:
> >
> > At the moment we have an Authentication SPI that will let you easily
> > authenticate users with your existing database of users. The first
> > time a new user logs in using this approach a user will be pulled in
> > to the Keycloak database. There's no documentation for this feature
> > yet, but look at the SPI at
> >
> https://github.com/keycloak/keycloak/tree/master/authentication/authentication-api
> > and the implementation that uses the Keycloak model itself to
> > authenticate at
> >
> https://github.com/keycloak/keycloak/tree/master/authentication/authentication-model
> .
> >
> > In the future we plan to provide a Sync SPI that will take this one
> > step further and let you sync users (and roles) to/from an existing
> > database.
> >
> > However, if you plan to completely replace your current
> > authentication system the cleanest solution may be to import your
> > current user database into Keycloak once and for all. If you're
> > interested in this approach let me know.
> >
> > ----- Original Message -----
> > > From: "Rodrigo Sasaki" <rodrigopsasaki at gmail.com
> > <mailto:rodrigopsasaki at gmail.com>>
> > > To: keycloak-user at lists.jboss.org
> > <mailto:keycloak-user at lists.jboss.org>
> > > Sent: Wednesday, 14 May, 2014 8:52:07 PM
> > > Subject: [keycloak-user] Migrating Users Database
> > >
> > > Hi,
> > >
> > > I'm trying to replace my current authentication system with
> > Keycloak, but I
> > > have one problem. I already have a database of users, populated
> with
> > > millions of records, and I wanted to make it work with Keycloak.
> > >
> > > What would be the best approach on this scenario? Should I
> > migrate everything
> > > to the Keycloak tables, or try to make Keycloak understand my
> current
> > > database?
> > >
> > > Is there any recommendation on this matter? And if there is, some
> > explanation
> > > or documentation?
> > >
> > > Thanks!
> > >
> > > --
> > > Rodrigo Sasaki
> > >
> > > _______________________________________________
> > > keycloak-user mailing list
> > > keycloak-user at lists.jboss.org <mailto:
> keycloak-user at lists.jboss.org>
> > > https://lists.jboss.org/mailman/listinfo/keycloak-user
> >
> >
> >
> >
> > --
> > Rodrigo Sasaki
> >
> >
> > _______________________________________________
> > keycloak-user mailing list
> > keycloak-user at lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-user
> >
>
> --
> Bill Burke
> JBoss, a division of Red Hat
> http://bill.burkecentral.com
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
--
Rodrigo Sasaki
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20140515/0167d5b0/attachment.html
More information about the keycloak-user
mailing list