← Back to Blog

Syncing Secondary User Store in WSO2 Identity Server Cluster: A Guide

WSO2 Identity Server is a identity and access management solution that provides a robust platform for managing digital identities. One of its key features is the ability to manage multiple user stores. In this blog post, we will delve into the process of syncing secondary user stores in a WSO2 Identity Server cluster.
By Saturn Cloud | | Miscellaneous

Syncing Secondary User Store in WSO2 Identity Server Cluster: A Guide

WSO2 Identity Server is a comprehensive identity and access management solution that provides a robust platform for managing digital identities. One of its key features is the ability to manage multiple user stores. In this blog post, we will delve into the process of syncing secondary user stores in a WSO2 Identity Server cluster.

Introduction to WSO2 Identity Server and User Stores

WSO2 Identity Server (WSO2 IS) is an open-source Identity and Access Management (IAM) product that provides security and identity management functionalities. It supports a wide range of protocols such as SAML, OAuth2, and OpenID Connect, making it a versatile choice for many organizations.

A user store in WSO2 IS is a database that stores user data. WSO2 IS supports primary and secondary user stores. The primary user store is the main user store that stores user data, while secondary user stores are optional and can be used to segregate users and roles.

Why Sync Secondary User Stores?

In a clustered environment, syncing secondary user stores is crucial for maintaining data consistency and integrity. It ensures that all nodes in the cluster have the same user data, thereby preventing any discrepancies that could lead to authentication or authorization issues.

Step-by-Step Guide to Sync Secondary User Stores in WSO2 IS Cluster

Step 1: Configuring the Secondary User Store

The first step is to configure the secondary user store. This can be done via the management console of WSO2 IS. Navigate to Main > Identity > User Stores > Add and fill in the necessary details.

Main > Identity > User Stores > Add

Step 2: Enabling User Store Configuration Deployment Synchronizer

The User Store Configuration Deployment Synchronizer is a feature in WSO2 IS that synchronizes user store configurations across the cluster. To enable this feature, navigate to the <IS_HOME>/repository/conf/deployment.toml file and add the following configuration:

[UserStoreConfigDeployer]
enable = true

Step 3: Syncing the Secondary User Store

After enabling the User Store Configuration Deployment Synchronizer, the secondary user store can be synced. This is done by clicking on the Update button in the secondary user store configuration page. Once this is done, the secondary user store will be synced across all nodes in the cluster.

Main > Identity > User Stores > (Select User Store) > Update

Verifying the Sync

To verify that the secondary user store has been synced, you can check the <IS_HOME>/repository/deployment/server/userstores directory in all nodes. If the sync was successful, you will see the XML file of the secondary user store in this directory.

Conclusion

Syncing secondary user stores in a WSO2 Identity Server cluster is a crucial task for maintaining data consistency and integrity. By following the steps outlined in this guide, you can ensure that your secondary user stores are properly synced across your WSO2 IS cluster.

Remember, WSO2 IS is a powerful tool for managing digital identities, and properly managing user stores is a key part of leveraging its full potential. Stay tuned for more guides on how to get the most out of WSO2 Identity Server.

Keywords

  • WSO2 Identity Server
  • User Stores
  • Secondary User Store
  • Cluster
  • Sync
  • User Store Configuration Deployment Synchronizer
  • Data Consistency
  • Data Integrity
  • Identity and Access Management
  • XML
  • SAML
  • OAuth2
  • OpenID Connect

About Saturn Cloud

Saturn Cloud is your all-in-one solution for data science & ML development, deployment, and data pipelines in the cloud. Spin up a notebook with 4TB of RAM, add a GPU, connect to a distributed cluster of workers, and more. Join today and get 150 hours of free compute per month.

Try Saturn Cloud Now