I've discussed use case B with our Keystone team and seems that it's impossible to support such a use case in Keystone until Federation is fully implemented. (Or at least implement it w/o severe security implications related to token revocation). Since this use case was the main reason of implementing the Horizon support, I'm changing this to Won't Fix for now.
I've discussed use case B with our Keystone team and seems that it's impossible to support such a use case in Keystone until Federation is fully implemented. (Or at least implement it w/o severe security implications related to token revocation). Since this use case was the main reason of implementing the Horizon support, I'm changing this to Won't Fix for now.