Practical Federated Identity
summary
Live walkthrough configures Horizon and Keystone for web SSO using SAML2 fronted by epsilon with a FreeIPA IdP, Apache protected by mod_auth_mellon, and keystone configured for keystone to keystone federation and trusted dashboards. Shows the exact CLI and config steps: enable web SSO, register identity provider and protocol, add JSON mapping that turns SAML attributes into Keystone groups and roles, and restart services. The demo succeeds after mapping fixes and exposes the common debugging pain points.
AI-written summary · about
chapters (8)
- 0:00Introduction to federation
- 1:06Identity protocol overview
- 5:53Demo infrastructure setup
- 9:22Configuring Horizon and Apache
- 14:58Configuring Keystone
- 18:59Finalizing the mapping logic
- 24:26Summary and best practices
- 27:18Debugging and Q&A
related talks
01h 12mIdentity 2.0: the what, why and how of social and federated login
29mUnify Your OpenStack with Your Identity Provider
15mImprovements to Identity Federation in Keystone
18mOne Identity to Rule Them All
09mWarmup - Bifrost
57mOpenID Connect Architectural Patterns
33mFIDO2 authentication for centrally managed users
24mOpenID Connect: The bridge between an Azure AD identity & your cloud platforms