Bridging Clouds with Keystone to Keystone Federation

Since Kilo, keystone has featured the ability to provide federated identity across multiple OpenStack clouds in a configuration we call Keystone to Keystone. In such a setup, one keystone acts as a SAML2.0 identity provider, generating SAML assertions that are consumed by another keystone acting as a service provider. Although this feature has been available for some time, its uses are still not widely understood. This session will be a technical deep-dive into the core concepts behind Keystone