Home OpenStack-Ansible Installation Guide

Configuring Identity Service federation (optional)

In Identity Service federation, the identity provider (IdP) and service provider (SP) exchange information securely to enable a user on the IdP cloud to access resources of the SP cloud.

Note

For the Kilo release of OpenStack, federation is only partially supported. It is possible to perform a federated login using command line clients and scripting, but Dashboard (horizon) does not support this functionality.

The following procedure describes how set up federation.

  1. Configure Identity Service (keystone) service providers.

  2. Configure the identity provider:

  3. Configure the service provider:

  4. Run the authentication wrapper to use Identity Service to Identity Service federation.

    For examples of how to set up Identity Service to Identity Service federation, see the Identity Service to Identity Service federation example use-case.


Previous topic

Checking the integrity of your configuration files

Next topic

Using Identity Service to Identity Service federation

Project Source

This Page