[prev in list] [next in list] [prev in thread] [next in thread] 

List:       keycloak-user
Subject:    [keycloak-user] (no subject)
From:       bburke () redhat ! com (Bill Burke)
Date:       2015-11-16 16:03:04
Message-ID: 5649FE38.2020808 () redhat ! com
[Download RAW message or body]

I'm saying you don't need to do anything.  Just don't include password 
in the supported credential types of your UserFederationProvider.

On 11/16/2015 10:21 AM, Frank van Veen wrote:
> Hello Bill,
> 
> Sorry if my previous mail was not very helpful in describing my problem.
> 
> I want to go through the following steps to login:
> 
> 1. User "Frank" with password "welcome" wants to login using keycloak
> 2. Keycloak request a user exist on the external database. If this returns true =>
> 3. Validate the password "welcome" to the password saved in keycloak which belongs \
> to user "Frank". 
> The problem is that I don't understand how to validate the password "welcome" with \
> the password located in the keycloak database. 
> Is there a way to request a " UserCredentialModel " and use the value stored in \
> this object to check  if passwords match? Is there a method that I can call that is \
> similar to "ChallengeCredentials(String aPasswordToValidate)" which returns a \
> Boolean? 
> Sincerely,
> 
> Frank van Veen
> 
> 
> -----Original Message-----
> From: keycloak-user-bounces at lists.jboss.org [mailto:keycloak-user-bounces at \
>                 lists.jboss.org] On Behalf Of Bill Burke
> Sent: maandag 16 november 2015 15:24
> To: keycloak-user at lists.jboss.org
> Subject: Re: [keycloak-user] (no subject)
> 
> UserFederationProvider.getSupportedCredentialTypes() specifies which credential \
> types your provider is responsible for validating.  Does that answer the question? 
> On 11/16/2015 8:25 AM, Frank van Veen wrote:
> > Hello,
> > 
> > I am trying to set-up a user federation. My project involves an external \
> > database. Currently no user data has to be imported from the external database. \
> > Changes in keycloak need to be exported to the external database. We don't want \
> > to validate logins against the external database. Could someone explain to me how \
> > to validate a user login against the keycloak database? This would be while using \
> > the "validCredentials(RealmModel realm, UserModel user, List<UserCredentialModel> \
> > input)" method. 
> > Thanks in advance.
> > 
> > Sincerely,
> > 
> > Frank van Veen
> > _______________________________________________
> > keycloak-user mailing list
> > keycloak-user at lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-user
> > 
> 
> --
> Bill Burke
> JBoss, a division of Red Hat
> http://bill.burkecentral.com
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
> 

-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com


[prev in list] [next in list] [prev in thread] [next in thread]