Configure Userstores¶

WSO2 Identity Server allows configuring multiple userstores to your system that are used to store users and their roles (Groups). Out of the box, WSO2 Identity Server supports JDBC, LDAP, and Active Directory userstores with the capability of configuring custom userstores. There are different userstore adapters called Userstore managers, which are used to connect with these userstore types.

There are two types of userstores - Primary Userstore (Mandatory) and Secondary userstores (Optional). All the supported userstores can be configured under these two types.

Primary userstore (Mandatory)¶

This is the main user store that is shared among all the tenants in the system. Only one userstore should be configured as the primary userstore and it is configured in the <IS_HOME>/repository/conf/deployment.toml file. By default, WSO2 Identity Server uses the embedded H2 database as the primary user store. It is recommended to change this default configuration in the production system.

see, Configure the Primary Userstore

Secondary userstore(s) (Optional)¶

Any number of secondary userstores can be easily set up for your system. These userstores are specific to the created tenant, and they are not shared among multiple tenants.
You can use the management console to create secondary userstores or you can create them manually. These will be stored in an xml file with the configurations corresponding to the secondary userstore.

see, Configure a Secondary Userstore

Userstore manager¶

Adapters used to connect with different userstores are called Userstore Managers. By default, there are userstore managers for JDBC, LDAP and Active Directory userstores. If you need to add a new userstore implementation, see Write a Custom Userstore Manager. When you configure the userstore, you have to set the userstore manager class name.