<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;"><div>Horizon doesn't currently support Keystone to Keystone federation, but there's ongoing work to support it in Horizon [1].</div><div><br></div><div>Others might know more about the single sign-on capabilities of Horizon than I do, but one thing you could do for now is use the AVAILABLE_REGIONS setting [2] to specify the separate Keystone endpoints. There's an effort underway to rename AVAILABLE_REGIONS to make the setting name less confusing, but you can think of it as a setting for different Keystone endpoints for separate clouds. Your users will most likely have to reauthenticate to switch between the clouds, but it will solve your "access another OpenStack Cloud from the same Horizon dashboard" use case.</div><div><br></div><div>[1] https://blueprints.launchpad.net/horizon/+spec/k2k-federation</div><div>[2] http://docs.openstack.org/developer/horizon/topics/settings.html</div><div><br></div><div>Thanks,</div><div>Brad</div><div><br></div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">From: </span> sohan sangwan <<a href="mailto:sohaninfo@gmail.com">sohaninfo@gmail.com</a>><br><span style="font-weight:bold">Date: </span> Friday, May 6, 2016 at 4:00 AM<br><span style="font-weight:bold">To: </span> "<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>" <<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>><br><span style="font-weight:bold">Subject: </span> [Openstack] Does OpenStack Horizon support multiple OpenStack Clouds ?<br></div><div><br></div><div dir="ltr"><div><div><div><div><div><div><div><div>Hi,<br><br></div>I have mutliple OpenStack clouds running. Let us say two Clouds(or Keystones as Service Providers) for ease. I configured both Keystones for Federations. Where both Keystones are configured as Service Providers(SP) and Shibboleth Identity Provider as IdP.<br><br></div>Now I configured Horizon for Single Sign-On on one OpenStack Cloud. <br><br></div>My requirement is to access another OpenStack Cloud from the same Horizon dashboard. <br><br>I have got following questions. I would highly appreciate if you could clarify and answer my following questions ?<br><br>1. Does Horizon support to access multiple OpenStack Clouds ?<br></div>2. If Horizon does not support(I assume), then how is the Single Sign-On used ? I mean what is the use case of Single Sign-On in terms of OpenStack Horizon.<br></div>3. If Horizon does not support Multiple OpenStack Clouds, is there a plan to support it in future ?<br></div>4. Is there any other dashboar that supports Multiple Clouds ? I heard about ManageIQ. Is it right decision to move from Horizon to ManageIQ for my this requirement ?<br><br></div><div>I am new to OpenStack community. If any question does not make any sense, I apologize.<br></div><div><br></div>Thanks and regards,<br></div>Sohan<br><div><div><div><div><div><br><br><br><br></div></div></div></div></div></div></span></body></html>