Repository navigation
Transient Users #40662
Unanswered
yoanaenikova
asked this question in
Q&A
Transient Users
#40662
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
We are considering using Transient Users in our system to simplify and unify user management.
Our setup involves two authentication flows within a single realm:
Our goal is to unify user handling by relying solely on User Federation. However, this doesn’t appear to be feasible for the Token Exchange flow, as Keycloak’s default behavior creates a local user, federated identity, and identity provider (IdP) link in the internal database.
To work around this and keep user management consistent, we are exploring the use of Transient Users, which would allow us to bypass local user creation and use User Info in order to supply Keycloak with the custom attributes for the users.
Could you share the current direction regarding this feature? Specifically, will Transient Users be officially supported or released as a preview, or is there still a plan to remove the feature as previously mentioned here:
#29839
Additionally, are there any other features or recommended approaches that could help us unify user storage in Keycloak?
All reactions