[Openstack] Openstack login via SimpleSamlPHP (LDAP, OAuth, OpenID, etc..)

Tim Bell Tim.Bell at cern.ch
Tue Aug 6 18:04:52 UTC 2013

I would be very interested in a native SAML for single sign on implementation with Horizon login. This would mean Python rather than 
PHP along with potentially (I think) creating a situation where a user can use the Web GUI through single sign on but not able to use 

Depending on the use cases, this may not be an issue but as far as I understand, it is a limitation of the technology at present.


From: Miller, Mark M (EB SW Cloud - R&D - Corvallis) [mailto:mark.m.miller at hp.com]
Sent: 06 August 2013 19:06
To: Rok Kralj; openstack at lists.openstack.org
Subject: Re: [Openstack] Openstack login via SimpleSamlPHP (LDAP, OAuth, OpenID, etc..)

How is this different than the new H-2 split backend functionality?

From: Rok Kralj [mailto:os at rok-kralj.net]
Sent: Tuesday, August 06, 2013 5:38 AM
To: openstack at lists.openstack.org <mailto:openstack at lists.openstack.org>
Subject: [Openstack] Openstack login via SimpleSamlPHP (LDAP, OAuth, OpenID, etc..)

As far as I know, the ability to log in to OpenStack via arbitrary Identity Provider (IdP) is a widely desired feature. Therefore, we 
have decided to integrate Keystone & Horizon with Simple Saml PHP, since it provides a lot of AUTH sources (aka. IdPs), for example 
LDAP, database, facebook, etc... Check out our effort in this short video (40s):


For more, the instructions and a short introduction is available in the attached readme.pdf.

Feedback is really appreciated.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130806/de39e444/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 7414 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130806/de39e444/attachment.bin>

More information about the Openstack mailing list