Comment 5 for bug 1476213

Cross-domain user role assignment and cross-domain user group membership used to be supported in Keystone - this bug implies that one or both of those is no longer the case? Which is no longer supported? Does anyone know why such support was removed from keystone? I imagine there would be a negative test in keystone that would explain.