Migrate Users to OIDC

[MarkusF42]

Hi,

We currently use the built-in IDP and would like to migrate to an external OpenID Connect identity provider.
Is there a way to map existing users to OIDC users?
If not, is there any other way to migrate the data, user permissions, etc. of a user to an OIDC user?
Is there a way to obtain a user's opaque ID so that I can determine which directory in the data directory belongs to which user?

Thank you in advance.
Markus

[Gustavo-V-F]

Hi @MarkusF42,

I have the same question, I've seen that their roadmap has ownership transfer, with a 'needs funding' tag, but I been wondering if there was a way to do this in the mean time? Maybe syncing the internal ldap server with the external, i.e. keycloak?

Did you find out a way?

Thank you for your time
Gustavo

[micbar]

Transfer ownership is a different thing.

basically you need an LDAP export and reimport.

you could connect the internal LDAP to keycloak and set up an LDAP federation.

With an ldap attribute mapper you can map the opencloudUUID to a keycloak user attribute and use that attribute later as a token claim for openCloud.

[Gustavo-V-F]

Transfer ownership is a different thing.

basically you need an LDAP export and reimport.

you could connect the internal LDAP to keycloak and set up an LDAP federation.

With an ldap attribute mapper you can map the opencloudUUID to a keycloak user attribute and use that attribute later as a token claim for openCloud.

Ah yes, though different, it would solve a problem I have. A project space was created by a user in the internal LDAP, and I would like to change the space owner/manager to an autoprovisioned user in my external LDAP.

But thank you, I'm going to try to set up the connection and map the users.

[Gustavo-V-F]

Thank you @micbar! I had some trouble mapping between federations, so I copied the openCloudUUID from a user with management access to the space to a new autoprovisioned user and that did the trick. Now I have access to the space, and I don't need to copy a 200GB+ space 😅