[keycloak-user] How to migrate users and roles from in-house storage

[Paulo Pires]

More than 150k. Is there a Java library for the REST api?

On Jul 20, 2016 13:56, "Stian Thorgersen" <sthorger at redhat.com> wrote:

> Depending on the amount of users I'd use either partial import through the
> admin console (if you don't have more than a thousand or so users) or use
> the admin REST endpoints if you have quite a lot of users.
>
> On 20 July 2016 at 11:52, Paulo Pires <pires at littlebits.cc> wrote:
>
>> Hi all,
>>
>> I'm in the process of migrating from an in-house user-role storage to
>> Keycloak and I'm looking for programmatic (Java) ways to migrate all
>> current users to the new storage. And I need your help to figure out the
>> best approach.
>>
>> At first, when reading KC documentation, I believed I could easily
>> achieve this by implementing a User Federation provider but after diving a
>> little more into it, and looking for examples, I can't see a way to migrate
>> all users on-demand but simply one user at a time, possible during log-in.
>>
>> Next, I tried and look into ways, such as admin-cli, REST, etc but
>> nothing strikes me as the solution to use.
>>
>> Here's what I was hoping to deliver:
>> * Get all roles and users from my soon-to-be deprecated storage, e.g.
>> MySQL tables
>> * Add roles to KC
>> * Iterate users and add user to KC + map roles + update password hashes
>> (here I know I need to implement a HashProvider)
>>
>> Any hints will be appreciated!
>>
>> Pires
>>
>> _______________________________________________
>> keycloak-user mailing list
>> keycloak-user at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160720/59bfc1d8/attachment-0001.html