OpenStack Security Advisory

  1. Bug #1980349
  2. Comment #8

Comment 8 for bug 1980349

Revision history for this message
Sven Anders (tabacha) wrote :

Hi Mohammed,
I am unsure, I am not a OpenStack Developer. I am only reporting an issue. I do not know how Keystone and SAML works in detail.

But I would suggest that the incomming call is only acceepted when it comes from an Ip Range which the Admin has configured form SAML / OpenID Auth.

I think every Company who wants to make federation, is knowing the servers which will federate.