Currently, a keystone IdP does not provide the domain of the project
when generating SAML assertions. Since it is possible to have two
projects with the same name but in different domains, this patch
adds an additional attribute called "openstack_project_domain"
in the assertion to identify the domain of the project.
Reviewed: https:/ /review. openstack. org/172536 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=fa844bc88ed b417f9513d19c74 9886a61d7b26ce
Committed: https:/
Submitter: Jenkins
Branch: master
commit fa844bc88edb417 f9513d19c749886 a61d7b26ce
Author: Rodrigo Duarte Sousa <email address hidden>
Date: Fri Apr 10 14:59:34 2015 -0300
Add openstack_ project_ domain to assertion
Currently, a keystone IdP does not provide the domain of the project project_ domain"
when generating SAML assertions. Since it is possible to have two
projects with the same name but in different domains, this patch
adds an additional attribute called "openstack_
in the assertion to identify the domain of the project.
Closes-Bug: 1442343 extra-attribute s
bp assertion-
Change-Id: I62ed73d87f268c 73294738845421d eb87088326b