Comment 2 for bug 1429334

Reviewed: https://review.openstack.org/162788
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=f4708ec55b7ffe252a21414346c1930da19af8b5
Submitter: Jenkins
Branch: master

commit f4708ec55b7ffe252a21414346c1930da19af8b5
Author: Adam Young <email address hidden>
Date: Mon Mar 9 18:43:41 2015 -0400

    Ignore unknown groups in lists for Federation

    Ignore groups that don't match ones in the backend.
    For Federation this will be the norm;
    groups may pass the blacklist but Keystone doesn't know about them.
    Otherwise, any in additional groups sent by the external IdP will
    break the mapping

    Change-Id: Ic1729da8606f50458db2fd163cd90bc5d89e24fa
    Closes-Bug: 1429334