Syncing users between different storage implementations

[ZIRAKrezovic]

Hello all,

I have the following use-case. The users log in via LDAP provider.

When the user logs in for the first time, I need to create their representation in our internal user DB. Additionally, the user data may change in LDAP, so I would like to sync the changes as well.

Is the scenario above possible?

Basically, I need a write-only storage adapter, without read capabilities, which will simply create users that are inserted into Keycloak's USER_ENTITY table for the first time and possibly update them afterwards (the second part is a welcome addition, not a requirement tho).

I am aware that there are different event listeners when users are created/added/etc - but are they able to do what I ask? Or do I need to manually trigger an action similiar to LDAP update/periodic import?

Thanks in advance for your response.