[openstack-dev] [Keystone] [Horizon] Federated Login
David Chadwick
d.w.chadwick at kent.ac.uk
Tue Aug 4 16:23:26 UTC 2015
Hi Doug
On 04/08/2015 16:52, Douglas Fish wrote:
> Hi David,
>
> This is a cool looking UI. I've made a minor comment on it in InVision.
thanks
>
> I'm curious if this is an implementable idea
It has to be, since there are many existing federations with 100s of
IDPs. Simply displaying a list is not usable in this environment.
There are many SPs that implement this sort of interface today. Eg. the
UK Access Management federation has hundreds of members, see
http://www.ukfederation.org.uk/content/Documents/MemberList
- does keystone support large
> numbers of 3rd party idps?
It should. I dont know of anyone who has done scalability testing, but I
dont think the design has any inbuilt constraints
is there an API to retreive the list of idps
yes
or
> does this require carefully coordinated configuration between Horizon and
> Keystone so they both recognize the same list of idps?
No, Horizon uses the Keystone API
regards
David
>
> Doug Fish
>
>
> David Chadwick <d.w.chadwick at kent.ac.uk> wrote on 08/01/2015 06:01:48 AM:
>
>> From: David Chadwick <d.w.chadwick at kent.ac.uk>
>> To: OpenStack Development Mailing List
> <openstack-dev at lists.openstack.org>
>> Date: 08/01/2015 06:05 AM
>> Subject: [openstack-dev] [Keystone] [Horizon] Federated Login
>>
>> Hi Everyone
>>
>> I have a student building a GUI for federated login with Horizon. The
>> interface supports both a drop down list of configured IDPs, and also
>> Type Ahead for massive federations with hundreds of IdPs. Screenshots
>> are visible in InVision here
>>
>> https://invis.io/HQ3QN2123
>>
>> All comments on the design are appreciated. You can make them directly
>> to the screens via InVision
>>
>> Regards
>>
>> David
>>
>>
>>
>>
> __________________________________________________________________________
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe:
> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
More information about the OpenStack-dev
mailing list