How to synchronize Microsoft users from Azure into the Keycloak

Question

We are trying to figure out a way to synchronize users from Azure Account into the Keycloak?

Unfortunately, we could not find a documentation for it

Do you know a proper way to do it ?

I want to use Azure as an external DB that I can use to authenticate my users.

Thank you

Answer 1

I want to use Azure as an external DB that I can use to authenticate my users

For that you can use Keycloak's User Federation functionality:

Many companies have existing user databases that hold information about users and their passwords or other credentials. In many cases, it is just not possible to migrate off of those existing stores to a pure Keycloak deployment. Keycloak can federate existing external user databases. By default, we support LDAP and Active Directory, but you can also code your own extension for any custom user database using our User Storage SPI.

The way it works is that when a user logs in, Keycloak will look into its own internal user store to find the user. If it cannot find it there, it will iterate over every User Storage provider you have configured for the realm until it finds a match. Data from the external store is mapped into a common user model that is consumed by the Keycloak runtime. (..)

In that section of the documentation you have all that you need. Nonetheless, to add the User Federation:

• Go to your Realm;
• Select User Federation;
• Add provider -> ldap;
• Configure all the Required Settings accordingly;
• Save.