[keycloak-user] A question on how to connect two keycloak servers

[Simon Payne]

i'm not sure if i'm understanding your requirement exactly but it sounds
similar to identity broker.  this allows your clients to integrate to a
single keycloak instance or realm which acts as broker for one or more
identity providers.


On Thu, Mar 15, 2018 at 3:05 PM, Matthew Beliveau <mbelivea at redhat.com>
wrote:

> Hello,
>
> I have five VMs running, one with an Apache protected app connected to a
> keycloak (Keycloak A) server through mod_auth_mellon. This Keycloak Server
> is connected to an IPA server (IPA A). I also have another
> Keycloak(keycloak B) server connected to another IPA server(IPA B). What I
> want to happen is when I log in to the Apache app, I want the first
> keycloak(A) server to connect to the second keycloak(B) server and obtain
> the users info on the IPA Server(B). Then I want to user's info to be
> updated on the first IPA server(A) and if the user doesn't exist then I
> want the user to be made. I want to know if that is possible right now to
> do and if it isn't how should I go about achieving my goal. I also want to
> know if it involves writing a plug in, where in the keycloak or IPA code
> should I look.
>
> Any help would be gratefully appreciated, and sorry if this is the wrong
> place to ask this question.
>
> Thank you,
> Matthew Beliveau
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>