Summary
In this chapter, we have revisited the identity service in OpenStack by implementing a federated setup. This new authentication design will allow cloud administrators and operators to decrease the complexity of user management across different enterprise entities and leverage a simple, efficient, and centralized authentication system. We have walked-through different terminologies that have co-existed since the rise of the federation of identity mechanism including the identity and service provider, protocols, and the mapping engine. We have explored its use case with Keystone and configured it as an SP that uses SAML and OpenID Connect protocols. Thanks to the usage of the Apache modules with Keystone, we could manage a full integration ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access