← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1641625] Re: RFE: add more info in the k2k assertion

 

Reviewed:  https://review.opendev.org/588211
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=dda426b61a18590a81c5b3af281eb0c410756692
Submitter: Zuul
Branch:    master

commit dda426b61a18590a81c5b3af281eb0c410756692
Author: Vishakha Agarwal <agarwalvishakha18@xxxxxxxxx>
Date:   Thu Aug 2 16:31:54 2018 +0530

    Add openstack_groups to assertion
    
    Currently, a keystone IdP does not provide the
    groups to which user belong when generating SAML
    assertions.This patch adds an additional attribute
    called "openstack_groups" in the assertion.
    
    Change-Id: I205e8bbf9a4579b16177f57e29e363f4205a2b48
    Closes-Bug: #1641625


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1641625

Title:
  RFE: add more info in the k2k assertion

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  Currently, the user's name (and domain name), their roles, the project
  they authenticated with (and project's domain name) are supplied in
  the k2k assertion that keystone generates.

  There has been a request that the user's groups also be included in
  the assertion.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1641625/+subscriptions


References