[keycloak-user] Is failing to DB possible for Federated Users?

[Bill Burke]

Not sure what you mean.  If the provider is not deployed?


On 8/3/16 9:00 PM, Josh Cain wrote:
> Hi all,
>
> I'm using a Keycloak impementation in which the majority of our users 
> come from a UserFederationProvider.  However, I'd ideally like to be 
> able to fall-back to the Keycloak database when this provider is 
> unavailable.  Is it possible to do so?
>
> I looked around at the codebase and UserFederationManager seems to be 
> where I'd like to change (namely the validateAndProxyUser 
> <https://github.com/keycloak/keycloak/blob/ec6b81e42dc8cb7abd9d06571a732cb3c40a5b03/server-spi/src/main/java/org/keycloak/models/UserFederationManager.java#L143> 
> method).  Is there any way to extend this with our own behavior?  
> Looks like that particular implementation is hard-coded into the 
> KeycloakSession interface.
>
> Josh Cain | Software Applications Engineer
> /Identity and Access Management/
> *Red Hat*
> +1 843-737-1735
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160803/3612548e/attachment.html