Keystone accepts Group IDs from the IdP without any Domain reference
Registered by
Olivier Pilotte
Right now, it's possible to provide a list of Groups (names) to Keystone via the Identity Provider. However, a Domain must provided to map those Groups. In the eventuality of the IdP having the reference to the Group IDs, Keystone should be able to map those Groups directly, without a Domain reference.
Blueprint information
- Status:
- Complete
- Approver:
- Steve Martinelli
- Priority:
- Low
- Drafter:
- Olivier Pilotte
- Direction:
- Approved
- Assignee:
- Olivier Pilotte
- Definition:
- Approved
- Series goal:
- Accepted for mitaka
- Implementation:
-
Implemented
- Milestone target:
-
mitaka-1
- Started by
- Olivier Pilotte
- Completed by
- Olivier Pilotte
Related branches
Related bugs
Sprints
Whiteboard
Gerrit topic: https:/
Addressed by: https:/
Keystone accepts Group IDs from the IdP without any Domain reference
Addressed by: https:/
Accepts Group IDs from the IdP without domain
(?)
