OpenStack Keystone OIDC Integration Charm

  1. Series zed
  2. Bug #2065590
  3. Comment #7

Comment 7 for bug 2065590

Revision history for this message
Gaetan Gouzi (ggouzi) wrote :

Thank you for the provided patches and for your time.

In addition to the 2 provided patches, we had to:
- Remove the 2 extra `OIDCRedirectURI` directives that are overriding our `redirect_uri`
- Change the order of keycloak and openid in the path of the Location directives
e.g `/v3/OS-FEDERATION/identity_providers/openid/protocols/keycloak/auth` vs `/v3/OS-FEDERATION/identity_providers/keycloak/protocols/openid/auth`

Those remaining changes were not needed on your setup (which was working fine)
Sending you the full diff in MP for more details.

On customer side, the redirect_uri was also misconfigured. We changed that.