openstack/openstack-ansible
Code Issues Proposed changes
openstack-ansible/doc/source/install-guide/configure-federation-idp-adfs.rst
Erik Wilson bc074df9ca Archive Keystone to Keystone Federation rst content 
This content will be used in a future release to
document Keystone to Keystone federation.
It includes mapping, SP setup, IdP setup, and
ADFS info.

Closes-bug: #1482781

Change-Id: Ia0509cd0f59da659e38db8fe55a19edc49b69b37
2015-10-08 10:43:29 +01:00

1.9 KiB
Raw Blame History

Home OpenStack Ansible Installation Guide

Configure Active Directory Federation Services (ADFS) 3.0 as an identity provider

To install ADFS:

Configuring ADFS

  1. The ADFS Server must already trust the service provider's (SP) keystone certificate. It is recommended to have the ADFS CA (or a public CA) sign a certificate request for the keystone service.

  2. In the ADFS Management Console, choose Add Relying Party Trust.

  3. Select Import data about the relying party published online or on a local network and enter the URL for the SP Metadata ( for example, https://<SP_IP_ADDRESS or DNS_NAME>:5000/Shibboleth.sso/Metadata)

    Note

    ADFS may give a warning message that some of the content gathered from metadata was skipped because is not supported by ADFS.

  4. Continuing the wizard, select Permit all users to access this relying party.

  5. In the Add Transform Claim Rule Wizard, select Pass Through or Filter an Incoming Claim.

  6. Name the rule (for example, Pass Through UPN) and select the UPN Incoming claim type.

  7. Click OK to apply the rule and finalize the setup.

References