daz 8972decd87 [docs] Address tox errors

Fix various build errors and markup in the developer docs
and the current install guide

Change-Id: If848250451c5df041c166d00325f97d72a90c003

2016-06-28 09:48:38 +10:00

Home OpenStack-Ansible Installation Guide

Configuring Active Directory Federation Services (ADFS) 3.0 as an identity provider

To install ADFS:

Configuring ADFS

Ensure the ADFS Server trusts the service provider's (SP) keystone certificate. We recommend to have the ADFS CA (or a public CA) sign a certificate request for the keystone service.
In the ADFS Management Console, choose Add Relying Party Trust.
Select Import data about the relying party published online or on a local network and enter the URL for the SP Metadata ( for example, https://<SP_IP_ADDRESS or DNS_NAME>:5000/Shibboleth.sso/Metadata)

Note

ADFS may give a warning message. The message states that ADFS skipped some of the content gathered from metadata because it is not supported by ADFS
Continuing the wizard, select Permit all users to access this relying party.
In the Add Transform Claim Rule Wizard, select Pass Through or Filter an Incoming Claim.
Name the rule (for example, Pass Through UPN) and select the UPN Incoming claim type.
Click OK to apply the rule and finalize the setup.