6168e3afc1
Change-Id: Ief47447ff7213d6813fd8a09a5d630972df23fef
13 lines
778 B
YAML
13 lines
778 B
YAML
---
|
|
features:
|
|
- >
|
|
[`blueprint shadow-mapping <https://blueprints.launchpad.net/keystone/+spec/shadow-mapping>`_]
|
|
The federated identity mapping engine now supports the ability to
|
|
automatically provision ``projects`` for ``federated users``. A role assignment
|
|
will automatically be created for the user on the specified project. If the
|
|
project specified within the mapping does not exist, it will be automatically
|
|
created in the ``domain`` associated with the ``identity provider``.
|
|
This behavior can be triggered using a specific syntax within the ``local``
|
|
rules section of a mapping. For more information see:
|
|
`mapping combinations <https://docs.openstack.org/developer/keystone/federation/federated_identity.html#mapping-combinations>`_
|