Open Stack

Hi
Does keystone has any plugin/extension for oauth2 authentication (keycloak in our case)
We would like to integrate keystone with an external oauth2 system in this way:
1/ Credentials / being sent to keystone
2/ Keystone will interact with external oauth2 server to  validate and fetch user details,tenant(project),roles etc.. (no endpoints) and will generate a token
3/ Token will be used from this point , token will need to be validated with oauth2 through keystone until expiry
Any thought/insights will be highly appreciated
Thanks




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20160526/b964b647/attachment.html>