Enabling Federation ExtensionΒΆ
To enable the federation extension:
Add the federation extension driver to the [federation] section in keystone.conf. For example:
[federation] driver = keystone.contrib.federation.backends.sql.Federation
Add the saml2 authentication method to the [auth] section in keystone.conf:
[auth] methods = external,password,token,saml2 saml2 = keystone.auth.plugins.saml2.Saml2
Add the federation_extension middleware to the api_v3 pipeline in keystone-paste.ini. For example:
[pipeline:api_v3] pipeline = access_log sizelimit url_normalize token_auth admin_token_auth xml_body json_body ec2_extension s3_extension federation_extension service_v3
Create the federation extension tables if using the provided SQL backend. For example:
./bin/keystone-manage db_sync --extension federation