Configuring Secondary User Stores

The default configuration of WSO2 products has a single user store. If required, you can configure WSO2 products to connect to several secondary user stores as well. After configuration, users from different stores can log in and perform operations depending on their roles/permissions. You can also configure your own customized user stores and connect them with the products as secondary user stores. The secondary user stores can be configured using one of the following methods:

Configuring using the management console

1. Log in to the management console.

2. On the Configure menu, click User Store Management under Configure. The User Store Management page appears.

   You cannot update the PRIMARY user store at run time, so it is not visible on this page.

3. Click Add Secondary User Store. The User Store Manager page appears.
4. Select the required implementation of user store manager from the User Store Manager Class drop-down list. 
   The displayed property list varies, based on the selected user store manager implementation.
   
   • By default, all the WSO2 products come with four user store manager implementations, which are as follows:
     
     • ReadWriteLDAPUserStoreManager
     • ReadOnlyLDAPUserStoreManager
     • ActiveDirectoryUserStoreManager
     • JDBCUserStoreManager
   • You can also populate this drop-down list with custom user store manager implementations by adding them to the server. 
     A sample custom user store manager can be found in the repository.

5. Enter a unique domain name and fill in the other data to define the user store. For details on each property, see the respective property description that is provided.

   The domain name should not include the '_' (underscore) character.

   

6. Ensure that all the mandatory fields are filled and a valid domain name is given and click  Add . 
   A message appears saying that the user stores are being added.  

   

   The above message does not imply that user store is added successfully. This can be checked in the following step.

7. Refresh the page. If the new user store has been successfully added, it will appear in the User Stores Management page.

After successfully defining a secondary user store, you can also edit the properties and enable/disable them in a dynamic manner.

Configuring manually

By default, the configuration of the primary user store is saved in the user-mgt.xml file. When you create a secondary user store, its configuration is saved to a XML file with the same name as the domain you specified. If desired, you can create this XML file manually and save it as follows:

• • If it is a configuration of a super tenant, the secondary user store definitions should go into the <PRODUCT_HOME>/repository/deployment/server/userstores directory.
  • If it is a general tenant, the configuration should go into the <PRODUCT_HOME>/repository/tenants/<tenantid>/userstores directory.
  • The secondary user store configuration file, should have the same name as the domain with an underscore (_) in place of the period. For example, if the domain is  wso2.com , name the file as follows:  wso2_com.xml
  • One file only contains the definition for one user store domain.