OpenStack Identity (keystone)

  1. Bug #1724645
  2. Comment #1

Comment 1 for bug 1724645

Revision history for this message
Colleen Murphy (krinkle) wrote :

The workaround is to do something like this in the config:

[auth]
methods = [...],saml2_mellon, saml2_shib
saml2_mellon = keystone.auth.plugins.mapped.Mapped
saml2_shib = keystone.auth.plugins.mapped.Mapped

[saml2_mellon]
remote_id_attribute = MELLON_IDP

[saml2_shib]
remote_id_attribute = Shib-Identity-Provider

It would be nice if we could make this more intuitive.