Give more details about the K2K flow

[Rodrigo Duarte]

Currently, the K2K flow in the config file [1] isn't detailed enough, we should provide at least the next step where we exchange a SAML assertion for a unscoped token from the SP.

[1] https://github.com/openstack/keystone/blob/master/doc/source/configure_federation.rst#testing-it-all-out

[Marek Denis (marek-denis)]

I am not sure whether we should start explaining vaguely how the idp-initiated saml workflow works. Maybe it's worth waiting few more days for K2KAuthPlugin and make a reference to that?

[Rodrigo Duarte (rodrigodsousa)]

The last step in the doc is to retrieve the SAML assertion from the IdP Keystone. My idea was to have a next step with two requests to the SP: initial step to send the assertion and the GET to retrieve the unscoped token.

[Dolph Mathews (dolph)]

This bug hasn't been touched in awhile, and I swear I've seen these docs somewhere else. Marek/Rodrigo, has this been fixed and I just can't find it?

[Marek Denis (marek-denis)]

I remember we had some duplicated bugs and indeed some improvements to docs were proposed.
However I cannot find any similar bug that would be resolved and assigned to myself.

[Morgan Fainberg (mdrnstm)]

Marking as invalid since this should have expired as incomplete long ago.