Comment 10 for bug 2064718

So, I think that in fact you'd need to adjust your "keystone_sp - trusted_idp_list - federated_identities" to contain "domain: Default" instead of `domain: default" to workaround the issue.