Start your existing (“old”) keycloak instance with following parameters:

bin/standalone.sh -Dkeycloak.migration.action=export -Dkeycloak.migration.provider=singleFile -Dkeycloak.migration.file=/home/kalaschnikow/Desktop/keycloak.json

See also official documentation

http://www.keycloak.org/downloads.html

Note: Downloads don't work in Opera (strange…) - browser crashes. So it will be better to use Firefox.

It is not recommended to use the built-in H2 database, so we should create a MySQL database for keycloak.

Start mysql

# mysql -u root

Then create the DB:

CREATE DATABASE keycloak2_5_1;

Then copy the MySQL module to the keycloak. It should be in the directory:
$KEYCLOAK_HOME/modules/system/layers/base/com/mysql/jdbc/main

You can also create this module manually. Here is the documentation about it.

After that edit standalone.xml and add to it the follwing lines:

<subsystem xmlns="urn:jboss:domain:datasources:4.0">
  <datasources>
<!-- ... -->
    <datasource jndi-name="java:jboss/datasources/KeycloakDS" pool-name="KeycloakDS" enabled="true" use-java-context="true">
      <connection-url>jdbc:mysql://localhost:3306/keycloak2_5_1?useUnicode=true&amp;connectionCollation=utf8_general_ci&amp;characterSetResults=utf8&amp;characterEncoding=utf8</connection-url>
      <driver>mysql</driver>
      <security>
        <user-name>root</user-name>
        <password>YOURPASSWORD</password>
      </security>
    </datasource>
<!-- ... -->
    <drivers>
<!-- ... -->
      <driver name="mysql" module="com.mysql.jdbc">
        <driver-class>com.mysql.jdbc.Driver</driver-class>
        <xa-datasource-class>com.mysql.jdbc.jdbc2.optional.MysqlXADataSource</xa-datasource-class>
      </driver>
    </drivers>
  </datasources>

Start your new Keycloak. Create a new realm. Change into it. Import JSON file. Keycloak should import all users and roles. On “Login” tab set “Require SSL” to “None”.

Create client 'avril-web'. Important: Web-Origin should contain “http://localhost:8080/*”

Create client 'avril-backend'.

Create client 'avril-third-party'. Valid redirect URIs should contain:

org.aerogear.Shoot://oauth2Callback

Direct Access Grant Enabled - Off (?). On “Scopes” tab: Assigned roles should contain “user”.

User user_manager should be existing in realm avril-realm and should have role admin.