如何将基本密码用户从 Gigya 迁移到 WSO2 IS

Question

Should passwords be decrypted in gigya and imported into wso2 is to encrypt new ones? The risk is to drag passwords in the clear.

Should we extract the passwords with the hash and import them as such in WSO2 IS?

Are there other methods knowing that the base to migrate from Gigya to WSO2 IS about 3 million customers?

Answer 1

The easiest and best option to migrate users from gigya is run time user migration to WSO2 userstore. For that you can do the following,

• Plug the Giya userstore as a secondary userstore in WSO2 Identity Server
• Let the PRIMARY userstore as the userstore where gigya users should migrated.
• Write a custom userstore, which will first check whether user is available in PRIMARY userstore, if there authenticate from PRIMARY userstore. If the user is not available in PRIMARY, authenticate user from secondary userstore and if user is successfully authenticated, create the same user in the PRIMARY userstore.

We can use this custom userstore and the secondary userstore till all the users migrated to the PRIMARY userstore of WSO2 Identity Server. Once all done we can remove the secondary userstore as well as the custom userstore.

Step three of my blog explains this: https://medium.com/@gdrdabarera/user-migration-to-wso2-identity-server-is-simple-and-easy-now-da7ac7052d31

Moreover, if you need help you can post your questions in our slack channel. So our developers can help you ASAP https://join.slack.com/t/wso2is/shared_invite/enQtNzk0MTI1OTg5NjM1LTllODZiMTYzMmY0YzljYjdhZGExZWVkZDUxOWVjZDJkZGIzNTE1NDllYWFhM2MyOGFjMDlkYzJjODJhOWQ4YjE