<!DOCTYPE html>
<html><head>
<meta charset="UTF-8">
</head><body><p>Hi Kristi,</p><p>great, many thanks for the link, I will give this a try :-)</p><p>Kind regrads,</p><p>Michael</p><br><div class="io-ox-signature"><p class="default-style"><br></p><p class="default-style"><br>"Nikolla, Kristi" <knikolla@bu.edu> hat am 2. Dezember 2019 um 16:26 geschrieben: <br> <br></p></div><blockquote type="cite"><div class="ox-b9e585c965-WordSection1"><p class="ox-b9e585c965-MsoNormal">Hi Michael,</p><p class="ox-b9e585c965-MsoNormal"> </p><p class="ox-b9e585c965-MsoNormal">It is possible to use Keycloak as an identity provider and federate over SAML 2.0 or OpenID Connect. Please see this documentation for more details <a href="https://docs.openstack.org/keystone/latest/admin/federation/configure_federation.html#keystone-as-a-service-provider-sp"> https://docs.openstack.org/keystone/latest/admin/federation/configure_federation.html#keystone-as-a-service-provider-sp</a></p><p class="ox-b9e585c965-MsoNormal"> </p><p class="ox-b9e585c965-MsoNormal">There are a few improvements in later versions with regards to federation, so I would advise upgrading if possible. Most importantly, Mitaka has been End Of Life, and hence unsupported since 2017-04-10. But outside of that, you’re good to go.</p><p class="ox-b9e585c965-MsoNormal"> </p><p class="ox-b9e585c965-MsoNormal">Best,</p><p class="ox-b9e585c965-MsoNormal">Kristi</p><p class="ox-b9e585c965-MsoNormal"> </p><p class="ox-b9e585c965-MsoNormal"> </p><div style="border: none; border-top: solid #B5C4DF 1.0pt; padding: 3.0pt 0in 0in 0in;"><p class="ox-b9e585c965-MsoNormal"><strong><span style="font-size: 12.0pt; color: black;">From: </span></strong><span style="font-size: 12.0pt; color: black;">Michael Stang <michael.stang@dhbw-mannheim.de><br> <strong>Date: </strong>Friday, November 29, 2019 at 9:25 AM<br> <strong>To: </strong>"openstack-discuss@lists.openstack.org" <openstack-discuss@lists.openstack.org><br> <strong>Subject: </strong>[mitaka][keystone] Authentication over keycloak server possible? </span></p></div><div><p class="ox-b9e585c965-MsoNormal"> </p></div><div><p class="ox-b9e585c965-default-style">Hi,</p><p class="ox-b9e585c965-default-style">we have an OpenStack Mitaka installation running (yes I know it's pretty old ;-) ) at our lab and would like to use the keycloak-server from the central IT for authentication.</p><p class="ox-b9e585c965-default-style">So I would like to know if it is already possible in mitaka to use this external keycloak server or if this only possible in a later OpenStack version? Maybe anyone know and if yes is there any documentation how to do it? Was searching for it but found not much about it by now...</p><p class="ox-b9e585c965-default-style">Thanks :)</p><p class="ox-b9e585c965-default-style">Kind regards</p><p class="ox-b9e585c965-default-style">Michael</p><p class="ox-b9e585c965-default-style"> </p><p class="ox-b9e585c965-default-style">Michael Stang<br> Laboringenieur, Dipl. Inf. (FH)</p><p class="ox-b9e585c965-default-style">Duale Hochschule Baden-Württemberg Mannheim<br> Baden-Wuerttemberg Cooperative State University Mannheim<br> ZeMath Zentrum für mathematisch-naturwissenschaftliches Basiswissen<br> Fachbereich Informatik, Fakultät Technik<br> Coblitzallee 1-9 <br> 68163 Mannheim</p><p class="ox-b9e585c965-default-style"><a href="mailto:michael.stang@dhbw-mannheim.de">michael.stang@dhbw-mannheim.de<br> </a><a href="http://www.dhbw-mannheim.de/">http://www.mannheim.dhbw.de</a></p><p class="ox-b9e585c965-default-style"><br></p></div></div></blockquote><br> </body></html>