Overview

From: https://folio-org.atlassian.net/wiki/spaces/FOLIJET/pages/109969482/Bridging+the+gap+between+Users+in+the+system+and+Users+of+the+system

When Eureka introduced Keycloak, it was clear that some user information needs to reside in Keycloak. The term AuthUsers was used to refer to user records in Keycloak, composed primarily of data required for authentication and authorization, but also of some ancillary data to identify the user and facilitate administration / user mgmt. The prevailing thought was that we don’t need AuthUser records for all users in the system. In fact, the vast majority of users in Folio represent patrons or other people who are users in the system, but not users of the system. For clarity, users in the system but not of the system are referred to as “Person” records.

Scope

• Creation/mgmt of users in the Folio UI

• Creation/mgmt of users via Folio APIs

• User import via mod-users-import

• User migration APIs for migrating from the legacy platform to the Eureka platform

• Assignment of roles/capabilities to users

• Credential management (Setting a user’s password)

• Support / System / Tenant users

• Changes to the legacy platform are out of scope since this problem is specific to the Eureka platform