adorsys / keycloak-config-cli

Import YAML/JSON-formatted configuration files into Keycloak - Configuration as Code for Keycloak.
Apache License 2.0
705 stars 133 forks source link

Add support for partial update of users #910

Open jirutka opened 11 months ago

jirutka commented 11 months ago

Problem Statement

I’m using User Federation (LDAP), so I don’t wanna update the user name, email etc., but I’d like to manage realm roles and client roles via keycloak-config-cli.

Proposed Solution

Make IGNORED_PROPERTIES_FOR_UPDATE configurable via CLI option. Or better, add an inverse option to specify the properties that should be updated.

Environment

No response

Additional information

No response

Acceptance Criteria

No response

jonasvoelcker commented 3 months ago

Hi @jirutka, I guess this would not be that easy because keycloak only has a PUT-route for users so you need to load every detail of that user to make changes about them. If there is some interaction and the user changes an attribute, that information would be lost afterwards.