Configuring Secondary User Stores

To work with WSO2 products, you must have a primary user store. Additionally, you can configure several secondary user stores if required. After configuration, users from different stores can log in and perform operations depending on their roles/permissions. You can also configure your own customized user stores and connect them with the products as secondary stores.

You can use either the management console to create secondary user stores or you can create it manually. These will be stored as an XML file in the file system and use the same XML format, used to configure primary user store.

1. Log in to the management console and click Add under the User Stores sub menu in the Main menu. The Add New User Store page opens.

2. From the User Store Manager Class drop-down list, select the user store manager class that suits your user store. 

   The following table lists the available User store manager implementations and their usage:

   If you have added a custom user store manager to the system, that also be available in this drop-down menu.

3. Enter a unique domain name with no underscore (_) characters, and a description (optional) for this user store.

4. Enter values for the properties, using the descriptions in the 'Descriptions' column for guidance. The properties that appear, vary based on the user store manager class you selected, and there may be additional properties in Optional or Advanced sections at the bottom of the screen.
   
   In the following document, you can find the information on the properties that you need to configure in user store manager types and it provides the additional steps and recommendations specific to each user store manager.
   
   

   • Configuring a JDBC User Store

   • Configuring a Read-only LDAP User Store

   • Configuring a Read-write Active Directory User Store

   • Configuring a Read-write LDAP User Store

5. Make sure that all the mandatory fields are filled and a valid domain name is given, and click Add. A message appears saying that the user stores are being added.
   

6. Refresh the page after a few seconds to check the status.
   If the new user store is successfully added, it will appear in the User Stores page. This can be viewed at any time by clicking List under User Stores in the Main menu.
   
   

7. After adding to the server, you can edit the properties of the new secondary user store and enable/disable it in a dynamic manner.
   This will be saved to an XML file with the same name as the domain name, under  <PRODUCT_HOME>/repository/deployment/server/userstores directory for super tenant and <PRODUCT_HOME>/repository/tenants/<tenantid>/userstores directory fortenant.

If you prefer to configure the user store manually. Follow the below steps to create and save the .xml file:

1. When you configure multiple user stores, you must give a unique domain name to each user store in the <DomainName> element. If you configure a user store without specifying a domain name, the server throws an exception at start up.

2. If the configuration is done for the super tenant, save the secondary user store definitions in <PRODUCT_HOME>/repository/deployment/server/userstores directory.

3. If the configuration is done for the tenant, save the configuration in <PRODUCT_HOME>/repository/tenants/<tenantid>/userstores directory.

   In the following user store manager configuration sections, you can find sample configurations for each type of use store. Additionally, you need to set the DomainName property with the domain name of your user store.

   <Property name="DomainName">Remote</Property>