iamigrate

A vendor-neutral CLI for migrating CIAM identities between providers. Export users into a canonical format, validate them against your target, and import them in — no vendor lock-in on the format in between.

Install

Homebrew

brew install cerberauth/tap/iamigrate

Docker

docker run --rm ghcr.io/cerberauth/iamigrate --help

Linux packages (deb/rpm/apk/archlinux) and Scoop, WinGet, Chocolatey on Windows are also available. Or grab a prebuilt binary from the releases page.

See the installation guide for the full list of options.

Quick start

# Generate synthetic test data + a cleartext answer key for login verification
iamigrate testdata generate --count 1000 --hash bcrypt:cost=10 --mfa totp:rate=0.3 --out ./fixtures/

# Dry-run against your target's capabilities, no network calls
iamigrate validate --in ./fixtures/users.cmf.jsonl.gz --target auth0

# Import into a disposable Auth0 tenant
export AUTH0_DOMAIN=your-tenant.us.auth0.com
export AUTH0_TOKEN=...
iamigrate import auth0 --in ./fixtures/users.cmf.jsonl.gz --connection-id con_xxx

Migrating from a flat file

iamigrate export --source flatfile --in users.csv --format csv --out ./export/
iamigrate validate --in ./export/users.cmf.jsonl.gz --mapping ./export/mapping.yaml --target auth0

Learn more

• Documentation
• CLI reference

License

MIT, see LICENSE.