Keycloak can integrate with LDAP providers, such as Active Directory, that store users and credentials. You can configure Keycloak to validate credentials from the LDAP directory and pull in identity information.
To integrate users and groups in an LDAP directory, you must first add the LDAP provider and define the users that you want to add. See Adding an LDAP provider.
After you add the users, you must assign the users to a group or role as described in Assigning LDAP users to groups or roles.
Alternatively, you can map the LDAP group that contains the users to a Keycloak group. When you map a group, a group is created in Keycloak and all users in the group inherit the role assigned to the group. To map a group, see Mapping LDAP groups to Keycloak groups.
The following videos will walk you through adding users in Keycloak through LDAP integration:
To add individual users, see video.
To add groups, see video.