OpenStack Day France 2017

Federated Identity has been possible in keystone since Icehouse, allowing cloud administrators to enable users to securely access keystone with external credentials. However, understanding federation and setting it up is still a difficult endeavor that does not always go smoothly. This talk will review the core concepts and technologies behind federated keystone, then dive into how to configure it, from registering the identity and service providers to the attribute mappings, highlighting common issues found in the process and concluding with a live debugging session. We'll also discuss recent improvements and features as well as our future goals for making keystone federation easier and more useful.