commit e710384607cf13ac125f4632362c762383c0b62d
author Petr Michalec <pmichalec@mirantis.com> Thu Feb 02 07:21:01 2017 +0100
committer Petr Michalec <pmichalec@mirantis.com> Wed May 17 16:47:45 2017 +0200
tree 147c17d5a6a1250d73bd7f02f93f9f6712d268fa
parent 6f11fabb4a52a5adc326cac96079a332c372f082

Add web SSO w/shiboleth

Change-Id: I3d297d8a660dc6ea7bda81df21b9ed5a44c26616

keystone/server/websso.yml

diff --git a/keystone/server/websso.yml b/keystone/server/websso.yml
new file mode 100644
index 0000000..0960ccb
--- /dev/null
+++ b/keystone/server/websso.yml
@@ -0,0 +1,15 @@
+classes:
+- service.shibboleth.server.cluster
+parameters:
+  keystone:
+    server:
+      websso:
+        protocol: saml2
+        remote_id_attribute: Shib-Identity-Provider
+        federation_driver: keystone.contrib.federation.backends.sql.Federation
+        trusted_dashboard:
+          - https://${_param:cluster_public_host}/auth/websso/
+          - https://${_param:proxy_vip_host}/auth/websso/
+      auth_methods:
+      - saml2
+      - external