[keycloak-user] Exclude users from password policy

Bruno Oliveira bruno at abstractj.org
Fri Dec 16 07:00:24 EST 2016


Please file a Jira, describing your setup and the steps to reproduce.

On Fri, Dec 16, 2016 at 9:54 AM, marcelo.miura
<marcelo.miura at gdcommunity.co.uk> wrote:
> That's correct, yes!
>
> Any ideas?
>
>
>
> On 16/12/2016 09:50, Bruno Oliveira wrote:
>>
>> Hmmm, it looks like we have a similar bug
>> https://issues.jboss.org/browse/KEYCLOAK-3657.
>>
>> Is that what happen with your import, but instead of role ids it
>> changes user ids?
>>
>> On Thu, Dec 15, 2016 at 10:46 PM, marcelo.miura
>> <marcelo.miura at gdcommunity.co.uk> wrote:
>>>
>>> Thanks!
>>>
>>> I tried to do that, but when I imported the users to the new realm it
>>> changed the user ids.
>>>
>>> Am I missing any step here?
>>>
>>>
>>>
>>> On 15/12/2016 18:09, Bruno Oliveira wrote:
>>>>
>>>> You can make use of partial imports. Take a look here:
>>>>
>>>>
>>>> https://keycloak.gitbooks.io/server-adminstration-guide/content/topics/export-import.html
>>>>
>>>> On Thu, Dec 15, 2016 at 5:59 PM, marcelo.miura
>>>> <marcelo.miura at gdcommunity.co.uk> wrote:
>>>>>
>>>>> Thanks for your answer.
>>>>>
>>>>> Unfortunately, all my users are currently on master. Is there a way to
>>>>> change all my users to another realm?
>>>>>
>>>>> Would that work if I try to export and import it to another realm?
>>>>>
>>>>>
>>>>> Marcelo
>>>>>
>>>>>
>>>>> On 15/12/2016 17:08, Marek Posolda wrote:
>>>>>>
>>>>>> Maybe you can use the admin user from master realm (and not set any
>>>>>> password policies in master realm), but all your other users will be
>>>>>> in some other "business" realms, which will have password policy. Is
>>>>>> it work to have different realms?
>>>>>>
>>>>>> Marek
>>>>>>
>>>>>>
>>>>>> On 15/12/16 19:10, marcelo.miura wrote:
>>>>>>>
>>>>>>> Hi,
>>>>>>>
>>>>>>> I was wondering if that's possible to exclude a user from the
>>>>>>> password
>>>>>>> policies set on keycloak.
>>>>>>> Problem: I have an admin user used on my API to create new users,
>>>>>>> reset
>>>>>>> password and exclude users from keycloak. But as there's a password
>>>>>>> policy to expire the password within 30 days, this user cannot be
>>>>>>> used
>>>>>>> until we reset his password manually.
>>>>>>>
>>>>>>> Any ideas?
>>>>>>>
>>>>>>> Thanks in advance.
>>>>>>> _______________________________________________
>>>>>>> keycloak-user mailing list
>>>>>>> keycloak-user at lists.jboss.org
>>>>>>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>>>>>
>>>>>>
>>>>> _______________________________________________
>>>>> keycloak-user mailing list
>>>>> keycloak-user at lists.jboss.org
>>>>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>>>
>>>>
>>>>
>>
>>
>



-- 
- abstractj


More information about the keycloak-user mailing list