Hi, what is the correct way to migrate from a "classic" ldap user federation to an Active Directory while keeping role mappings?
OU, DN are different. Only the ldap uid becomes the samAccountName.
Should I edit the current User Federation "in place" and hope that keycloak will magically keep user links ?
Should I create a new User Federation and delete the other and hope that keycloak will magically keep user links ?
Should I forget about it and script mappings creation one by one by user id, based on an export from the current state ?