Summary

In this chapter, we have revisited the identity service in OpenStack by implementing a federated setup. This new authentication design will allow cloud administrators and operators to decrease the complexity of user management across different enterprise entities and leverage a simple, efficient, and centralized authentication system. We have walked-through different terminologies that have co-existed since the rise of the federation of identity mechanism including the identity and service provider, protocols, and the mapping engine. We have explored its use case with Keystone and configured it as an SP that uses SAML and OpenID Connect protocols. Thanks to the usage of the Apache modules with Keystone, we could manage a full integration of the identity service in an existing authentication environment that includes both Shibboleth and Google authentication API. It is...