Repository navigation
User Migration from external Service #21062
|
Greetings, everyone, Consequently, users will be present in Keycloak without their credentials. They will need to reset or set their password when they enter the Keycloak system. Here's how it will work: (Email is compulsory) If this approach is feasible, I would appreciate guidance on the recommended steps to implement it. Thanks. |
Replies: 1 comment 1 reply
|
I dont know how to configure your flow, but i can point to other options.
@Override
public boolean isValid(RealmModel realmModel, UserModel userModel, CredentialInput credentialInput) {
// credentialInput.getChallengeResponse() raw password
var result= externalService.login(userModel.getUsername(), credentialInput.getChallengeResponse());
if(result.getStatus() ==LoginStatus.FAILED){
return false;
}
// save password to keycloak
userModel.credentialManager().updateCredential(credentialInput);
}when all users will be login at least once you can disable your custom user federation |
|
No I don't know hash implementation of external system. while importing user I will set attribute (name = toBeRest value= yes) after login I will change attribute value This flow is working but I have one problem after sending reset password mail , I am getting user form screen (idle I should password form) |
I dont know how to configure your flow, but i can point to other options.
If you know how the hash algorithm is implemented in external services, then you sync hashed passwords into keycloak, after that you can create your own plugin with implemented PasswordHashProviderFactory here is an example https://github.com/pavelbogomolenko/keycloak-custom-password-hash/blob/master/src/main/java/org/keycloak/examples/providers/credential/hash/CustomPasswordHashProvider.java
(How i did it) implemente UserStorageProvider, ImportSynchronization, CredentialInputValidator.
UserStorageProvider and ImportSynchronization are responsible for sync users between external service and keycloak. But with Cr…