OpenStack Summit May 2015 Vancouver has ended
Back To Schedule
Tuesday, May 19 • 5:30pm - 6:10pm
New Advances in Federated Identity and Federated Service Provider Support for OpenStack Clouds

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

OpenStack continues to experience significant innovation in the area of federated identity and federated service provider support for OpenStack based hybrid clouds. In this presentation we will provide a brief overview of the federated functionality that was available in previous Keystone Releases (Icehouse and Juno). We then provide an overview of the newest innovations in Keystone for supporting hybrid clouds. We will share an overview of key new features such as  support for OpenID Connect and tighter integration with OpenStack's dashboard (Horizon). We will also provide an overview of how our OpenStack superuser, CERN, is leveraging the Keystone hybrid federation support and enhancing it with a discovery service for greater usability and scalability. We then provide a deep dive into the inner workings of Keystone's hybrid cloud support and describe the typical configurations required for deployment of this new capability. Lastly, we describe best practices for how to i) configure Keystone to interoperate with mod_shib , ii) configure Horizon to perform single sign-on for a federated hybrid cloud, and iii) configure a common mapping that will work with Keystone's hybrid support.

avatar for Marek Denis

Marek Denis

CERN Research Fellow, CERN, CERN
Marek is a core member of the Keystone core team, working on a CERN and Rackspace joint project. He focuses his efforts on building hybrid clouds.  Marek was one of the contributors for Icehouse Federation, Keystone2Keystone as well as implemented client side of the federation suite... Read More →
avatar for Rodrigo Duarte

Rodrigo Duarte

UFCG-LSD-HP Software Developer, Laboratório de Sistemas Distribuídos (LSD) - UFCG
Rodrigo received a MSc in Computer Science/Distributed Systems by the Federal University of Campina Grande - Brazil, in 2014. Currently, he is a core team member in the Oslo.policy library and responsible to make feature suggestions, PoC and code contributions for the OpenStack Project... Read More →
avatar for Morgan Fainberg

Morgan Fainberg

OpenStack Strategist, Former Keystone PTL, HP
Morgan is a former PTL (Project Team Lead) of the OpenStack Identity Project, Keystone, and is a Master Technologist for HP as part of HP Cloud engineering. As of 2013, he has been focused on improving Identity Management, Single Sign On, and access management in OpenStack and other... Read More →
avatar for Steve Martinelli

Steve Martinelli

Senior Software Developer, IBM, IBM Canada Ltd.
Steve Martinelli is an OpenStack Active Technical Contributor and a Keystone Core Contributor. He primarily focuses on enabling Keystone, which is OpenStack's Identity Manager, to better integrate into enterprise environments. Steve was responsible for adding Federated Identity and... Read More →
avatar for Brad Topol

Brad Topol

Distinguished Engineer, IBM
Dr. Brad Topol is an IBM Distinguished Engineer leading efforts focused on Open Technologies and Developer Advocacy. In his current role, Brad leads a development team focused on contributing to and improving Kubernetes and several other cloud native open source projects. Brad is... Read More →

Tuesday May 19, 2015 5:30pm - 6:10pm PDT
Room 121/122

Attendees (0)