OpenStack Liberty Design Summit

OpenStack continues to experience significant innovation in the area of federated identity and federated service provider support for OpenStack based hybrid clouds. In this presentation we will provide a brief overview of the federated functionality that was available in previous Keystone Releases (Icehouse and Juno). We then provide an overview of the newest innovations in Keystone for supporting hybrid clouds. We will share an overview of key new features such as  support for OpenID Connect and tighter integration with OpenStack's dashboard (Horizon). We will also provide an overview of how our OpenStack superuser, CERN, is leveraging the Keystone hybrid federation support and enhancing it with a discovery service for greater usability and scalability. We then provide a deep dive into the inner workings of Keystone's hybrid cloud support and describe the typical configurations required for deployment of this new capability. Lastly, we describe best practices for how to i) configure Keystone to interoperate with mod_shib , ii) configure Horizon to perform single sign-on for a federated hybrid cloud, and iii) configure a common mapping that will work with Keystone's hybrid support.