Skip to content

diff kratos

Looks up every CMF user in the live instance by email, else username, else phone number (via the Admin API’s credentials_identifier filter, which matches any trait the identity schema marks as a password identifier) and reports anyone missing, plus any drift in blocked/inactive state. Users with none of the three can’t be looked up and are listed as no identifier.

Terminal window
iamigrate diff kratos --in users.cmf.jsonl.gz --admin-url http://127.0.0.1:4434
FlagDescription
--inCMF users.cmf.jsonl.gz path (required)
--admin-urlKratos Admin API base URL (or $KRATOS_ADMIN_URL)