2016 OpenStack Summit Austin- David Grizzanti – Keystone v3, Single Sign On, and Multi Domain

preview_player
Показать описание
Sungard Availability Services started building a Public and Managed cloud platform on OpenStack Juno in 2014. Our product required that we provide Single Sign On (SSO) integrated with an existing SSO system, the ability for end customers to manage their own projects and users within their domain, and have these entities be replicated across multiple sites.

During this session we will review the design challenges Sungard AS faced providing this solution, how we were successful, and the approach we took with:
- Horizon to include domain tokens and management
- Keystone to use an external identity provider for login
- UI authentication flow through django openstack auth
- OpenStack component policy files
Рекомендации по теме