[prev in list] [next in list] [prev in thread] [next in thread] 

List:       keycloak-user
Subject:    [keycloak-user] Api for adding roles to users
From:       mposolda () redhat ! com (Marek Posolda)
Date:       2014-11-11 15:21:55
Message-ID: 54622993.4080509 () redhat ! com
[Download RAW message or body]

Hi,

I agree that performance of LDAP (and UserFederationProvider in general) 
have some space for improvements. I've created JIRA for it: 
https://issues.jboss.org/browse/KEYCLOAK-838 . Feel free to add more points.

Marek

On 8.11.2014 04:09, prab rrrr wrote:
> Hi Bill - Yes, I am using custom federation adapter and could 
> authenticate users successfully. Will try out your suggestions. Thanks.
>
> One observation though in the 1.1 Beta1 version- Based on debugging 
> comments, it appears that for each authentication attempt, the below 
> methods in Federation Provider are called multiple times (10 or 12 times)
>
> 1) proxy
> 2) isValid
> 3) getInstance (in Federation Factory)
>
> Thanks once again.
> Raghu
>
> ------------------------------------------------------------------------
> *From:* Bill Burke <bburke at redhat.com>
> *To:* keycloak-user at lists.jboss.org
> *Sent:* Friday, November 7, 2014 9:22 PM
> *Subject:* Re: [keycloak-user] Api for adding roles to users
>
> Are you writing a custom federation adapter?  Two options:
>
> * Define default roles within the admin console.  When your user is
> imported into a UserModel, the default roles will be added
> * Extract role mappings from your external store, and populate the user
> model with them when you import the user into the keycloak database.
>
>
>
> On 11/7/2014 4:46 PM, Raghuram wrote:
> > How do we add users to the default roles? I am using the key cloak 
> federation api to do custom authentication for a realm. Noticed that 
> the users are not able to login to the application after being 
> authenticated unless roles are added manually to them. Wondering if 
> the roles can be added within the federation provider code after 
> authenticating the users?
> >
> > Sent from my iPhone
>
> > _______________________________________________
> > keycloak-user mailing list
> > keycloak-user at lists.jboss.org <mailto:keycloak-user at lists.jboss.org>
> > https://lists.jboss.org/mailman/listinfo/keycloak-user
> >
>
> -- 
> Bill Burke
> JBoss, a division of Red Hat
> http://bill.burkecentral.com <http://bill.burkecentral.com/>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org <mailto:keycloak-user at lists.jboss.org>
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
>
>
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20141111/7fd2da5d/attachment-0001.html 

[prev in list] [next in list] [prev in thread] [next in thread]