Comment 1 for bug 1972736

Revision history for this message
Jonathan Rosser (jrosser) wrote :

Looking at the kolla docs and also as a mainatainer of openstack-ansible, both of these projects seem to use apache mod_auth_oidc to provide OIDC SSO for horizon.

There would be benefit to doing SSO support in Skyline with the same library, then we can reuse existing code in the deployment tool projects, and end users would have confidence that their mod_auth_oidc configurations would also be appropriate for Skyline.

OIDC is complex with many valid authorisation flows - mod_auth_oidc is very configurable and seems to work well already for openstack.