application credentials "projec ID" fiield is empty using SSO

Bug #1809237 reported by varocho
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Invalid
Undecided
Unassigned

Bug Description

Hi

We found this issue testing the new application credential feature from Rocky dashboard. Our external user are using a SSO to get access to openstack, they are mapped correctly to an internal project. Unfortunately when they request a new application credential the "project ID" field is empty so they get this error message when they try to use the credential from the client:

$ openstack application credential list
need one of hex, bytes, bytes_le, fields, or int (HTTP 400) (Request-ID: req-12f90f0f-319f-4b42-895a-a921f274d9ac)

As admin the user's app credential looks like this:

# openstack application credential list --user bb762ad156de46f6888bf2ae1001cade
+----------------------------------+-----------------+------------+--------------------------------------------------+----------------------------+
| ID | Name | Project ID | Description | Expires At |
+----------------------------------+-----------------+------------+--------------------------------------------------+----------------------------+
| a7300cb1848341188c408a5cb9069b1b | myappcredential | None | This is a app credential test valid for a month. | 2019-01-31T18:00:00.000000 |
+----------------------------------+-----------------+------------+--------------------------------------------------+----------------------------+

Any clue why we get a null Project ID using a SSO?

Cheers ant thanks!
Alvaro

Tags: rocky
Revision history for this message
varocho (alvarosimon) wrote :
Changed in keystone:
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.