4ca1a1f028
The ADFSPassword plugin currently sets the WS-Policy 'AppliesTo' EndpointReference Address in the WS-Trust RequestSecurityToken message to the value specified in the ‘service-provider-endpoint’ option. This may not be desirable if the Service Provider's SAML entity ID differs from the WS-Federation Passive Endpoint (i.e. service provider endpoint) consuming the WS-Trust RequestSecurityTokenResponse. This commit introduces the ability to specify the EndpointReference used in the RequestSecurityToken message via the 'service-provider-entity-id' option. If omitted, the EndpointReference defaults to the value provided in the ‘service-provider-endpoint' option to preserve backward compatibility. Change-Id: I842427232db79d628dc29f5a1dcf68e011667dfa Closes-Bug: #1689424
Team and repository tags
keystoneauth
This package contains tools for authenticating to an OpenStack-based cloud. These tools include:
- Authentication plugins (password, token, and federation based)
- Discovery mechanisms to determine API version support
- A session that is used to maintain client settings across requests (based on the requests Python library)
Further information:
- Free software: Apache license
- Documentation: https://docs.openstack.org/developer/keystoneauth
- Source: https://git.openstack.org/cgit/openstack/keystoneauth
- Bugs: https://bugs.launchpad.net/keystoneauth