azure - 如何将 Microsoft 用户从 Azure 同步到 Keycloak

Question

我们正在尝试找出一种将用户从 Azure 帐户同步到 Keycloak 的方法？

不幸的是，我们找不到它的文档

你知道正确的方法吗？

我想使用 Azure 作为外部数据库，用于对用户进行身份验证。

谢谢

Answer 1

I want to use Azure as an external DB that I can use to authenticatemy users

为此，您可以使用 Keycloak's User Federation功能:

Many companies have existing user databases that hold informationabout users and their passwords or other credentials. In many cases,it is just not possible to migrate off of those existing stores to apure Keycloak deployment. Keycloak can federate existing external userdatabases. By default, we support LDAP and Active Directory, but youcan also code your own extension for any custom user database usingour User Storage SPI.

The way it works is that when a user logs in, Keycloak will look intoits own internal user store to find the user. If it cannot find itthere, it will iterate over every User Storage provider you haveconfigured for the realm until it finds a match. Data from theexternal store is mapped into a common user model that is consumed bythe Keycloak runtime. (..)

在文档的该部分中，您拥有所需的一切。尽管如此，要添加用户联合:

• 前往你的领域；
• 选择用户联盟；
• 添加提供商 -> ldap;
• 相应地配置所有必需的设置；
• 保存。