<html><body>
<p><font size="2" face="sans-serif">Right, but that API is/should be protected. If we want to list IdPs *before* authenticating a user, we either need: 1) a new API for listing public IdPs or 2) a new policy that doesn't protect that API.</font><br>
<font size="2" face="sans-serif"><br>
Thanks,<br>
<br>
Steve Martinelli<br>
OpenStack Keystone Core</font><br>
<br>
<img width="16" height="16" src="cid:1__=0ABBF404DFF13A178f9e8a93df938@ca.ibm.com" border="0" alt="Inactive hide details for Lance Bragstad ---2015/08/04 01:49:29 PM---On Tue, Aug 4, 2015 at 10:52 AM, Douglas Fish <drfish@us.i"><font size="2" color="#424282" face="sans-serif">Lance Bragstad ---2015/08/04 01:49:29 PM---On Tue, Aug 4, 2015 at 10:52 AM, Douglas Fish <drfish@us.ibm.com> wrote: > Hi David,</font><br>
<br>
<font size="1" color="#5F5F5F" face="sans-serif">From: </font><font size="1" face="sans-serif">Lance Bragstad <lbragstad@gmail.com></font><br>
<font size="1" color="#5F5F5F" face="sans-serif">To: </font><font size="1" face="sans-serif">"OpenStack Development Mailing List (not for usage questions)" <openstack-dev@lists.openstack.org></font><br>
<font size="1" color="#5F5F5F" face="sans-serif">Date: </font><font size="1" face="sans-serif">2015/08/04 01:49 PM</font><br>
<font size="1" color="#5F5F5F" face="sans-serif">Subject: </font><font size="1" face="sans-serif">Re: [openstack-dev] [Keystone] [Horizon] Federated Login</font><br>
<hr width="100%" size="2" align="left" noshade style="color:#8091A5; "><br>
<br>
<br>
<br>
<br>
<font size="3" face="serif">On Tue, Aug 4, 2015 at 10:52 AM, Douglas Fish <</font><a href="mailto:drfish@us.ibm.com" target="_blank"><font size="3" color="#0000FF" face="serif"><u>drfish@us.ibm.com</u></font></a><font size="3" face="serif">> wrote:</font>
<ul style="padding-left: 9pt"><font size="3" face="serif">Hi David,<br>
<br>
This is a cool looking UI. I've made a minor comment on it in InVision.<br>
<br>
I'm curious if this is an implementable idea - does keystone support large<br>
numbers of 3rd party idps? is there an API to retreive the list of idps or<br>
does this require carefully coordinated configuration between Horizon and<br>
Keystone so they both recognize the same list of idps?<br>
</font></ul>
<br>
<font size="3" face="serif">There is an API call for getting a list of Identity Providers from Keystone</font><br>
<br>
<a href="http://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-federation-ext.html#list-identity-providers"><font size="3" color="#0000FF" face="serif"><u>http://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-federation-ext.html#list-identity-providers</u></font></a><br>
<br>
<font size="3" face="serif"> </font>
<ul style="padding-left: 9pt"><font size="3" face="serif">Doug Fish<br>
<br>
<br>
David Chadwick <</font><a href="mailto:d.w.chadwick@kent.ac.uk"><font size="3" color="#0000FF" face="serif"><u>d.w.chadwick@kent.ac.uk</u></font></a><font size="3" face="serif">> wrote on 08/01/2015 06:01:48 AM:<br>
<br>
> From: David Chadwick <</font><a href="mailto:d.w.chadwick@kent.ac.uk"><font size="3" color="#0000FF" face="serif"><u>d.w.chadwick@kent.ac.uk</u></font></a><font size="3" face="serif">><br>
> To: OpenStack Development Mailing List<br>
<</font><a href="mailto:openstack-dev@lists.openstack.org"><font size="3" color="#0000FF" face="serif"><u>openstack-dev@lists.openstack.org</u></font></a><font size="3" face="serif">><br>
> Date: 08/01/2015 06:05 AM<br>
> Subject: [openstack-dev] [Keystone] [Horizon] Federated Login</font><br>
<font size="3" face="serif">><br>
> Hi Everyone<br>
><br>
> I have a student building a GUI for federated login with Horizon. The<br>
> interface supports both a drop down list of configured IDPs, and also<br>
> Type Ahead for massive federations with hundreds of IdPs. Screenshots<br>
> are visible in InVision here<br>
><br>
> </font><a href="https://invis.io/HQ3QN2123" target="_blank"><font size="3" color="#0000FF" face="serif"><u>https://invis.io/HQ3QN2123</u></font></a><font size="3" face="serif"><br>
><br>
> All comments on the design are appreciated. You can make them directly<br>
> to the screens via InVision<br>
><br>
> Regards<br>
><br>
> David<br>
><br>
><br>
><br>
><br>
__________________________________________________________________________<br>
> OpenStack Development Mailing List (not for usage questions)<br>
> Unsubscribe:</font><font size="3" color="#0000FF" face="serif"><u><br>
</u></font><a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" target="_blank"><font size="3" color="#0000FF" face="serif"><u>OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</u></font></a><font size="3" face="serif"><br>
> </font><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank"><font size="3" color="#0000FF" face="serif"><u>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</u></font></a><font size="3" face="serif"><br>
><br>
<br>
<br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: </font><a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" target="_blank"><font size="3" color="#0000FF" face="serif"><u>OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</u></font></a><font size="3" color="#0000FF" face="serif"><u><br>
</u></font><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank"><font size="3" color="#0000FF" face="serif"><u>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</u></font></a></ul>
<tt><font size="2">__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: OpenStack-dev-request@lists.openstack.org?subject:unsubscribe<br>
</font></tt><tt><font size="2"><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a></font></tt><tt><font size="2"><br>
</font></tt><br>
<br>
</body></html>