[keycloak-user] How to migrate users and roles from in-house storage

[Paulo Pires]

I did check the admin-cli JAR but it's not clear how to add roles and
users, or if it's even implemented (I did check the REST API and there's
endpoints for that).

Thank you very much for clarifying,
Pires

On Wed, Jul 20, 2016 at 2:52 PM Stian Thorgersen <sthorger at redhat.com>
wrote:

> Yep, take a look at
> https://keycloak.gitbooks.io/server-developer-guide/content/topics/admin-rest-api.html
>
> On 20 July 2016 at 15:33, Paulo Pires <pires at littlebits.cc> wrote:
>
>> More than 150k. Is there a Java library for the REST api?
>>
>> On Jul 20, 2016 13:56, "Stian Thorgersen" <sthorger at redhat.com> wrote:
>>
>>> Depending on the amount of users I'd use either partial import through
>>> the admin console (if you don't have more than a thousand or so users) or
>>> use the admin REST endpoints if you have quite a lot of users.
>>>
>>> On 20 July 2016 at 11:52, Paulo Pires <pires at littlebits.cc> wrote:
>>>
>>>> Hi all,
>>>>
>>>> I'm in the process of migrating from an in-house user-role storage to
>>>> Keycloak and I'm looking for programmatic (Java) ways to migrate all
>>>> current users to the new storage. And I need your help to figure out the
>>>> best approach.
>>>>
>>>> At first, when reading KC documentation, I believed I could easily
>>>> achieve this by implementing a User Federation provider but after diving a
>>>> little more into it, and looking for examples, I can't see a way to migrate
>>>> all users on-demand but simply one user at a time, possible during log-in.
>>>>
>>>> Next, I tried and look into ways, such as admin-cli, REST, etc but
>>>> nothing strikes me as the solution to use.
>>>>
>>>> Here's what I was hoping to deliver:
>>>> * Get all roles and users from my soon-to-be deprecated storage, e.g.
>>>> MySQL tables
>>>> * Add roles to KC
>>>> * Iterate users and add user to KC + map roles + update password hashes
>>>> (here I know I need to implement a HashProvider)
>>>>
>>>> Any hints will be appreciated!
>>>>
>>>> Pires
>>>>
>>>> _______________________________________________
>>>> keycloak-user mailing list
>>>> keycloak-user at lists.jboss.org
>>>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>>>
>>>
>>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160720/3b280718/attachment.html