summaryrefslogtreecommitdiffstats
path: root/mcp/reclass/classes/system/keystone/server/websso.yml
diff options
context:
space:
mode:
authorMichael Polenchuk <mpolenchuk@mirantis.com>2017-05-24 12:44:05 +0400
committerMichael Polenchuk <mpolenchuk@mirantis.com>2017-05-24 12:47:57 +0400
commita6daf4ece3f05600ad66fea55c5220d07a71cef1 (patch)
tree988e0e370b7c2683f10eff189f2ba7b276b24923 /mcp/reclass/classes/system/keystone/server/websso.yml
parent7b4fbdd9be1a234c345b21ebf0eafcf7f5187f26 (diff)
[mcp] Bring in reclass system salt models
Change-Id: I1a865b7524f3a5242544e60e6b36b1092721c58b Signed-off-by: Michael Polenchuk <mpolenchuk@mirantis.com>
Diffstat (limited to 'mcp/reclass/classes/system/keystone/server/websso.yml')
-rw-r--r--mcp/reclass/classes/system/keystone/server/websso.yml15
1 files changed, 15 insertions, 0 deletions
diff --git a/mcp/reclass/classes/system/keystone/server/websso.yml b/mcp/reclass/classes/system/keystone/server/websso.yml
new file mode 100644
index 000000000..0960ccb32
--- /dev/null
+++ b/mcp/reclass/classes/system/keystone/server/websso.yml
@@ -0,0 +1,15 @@
+classes:
+- service.shibboleth.server.cluster
+parameters:
+ keystone:
+ server:
+ websso:
+ protocol: saml2
+ remote_id_attribute: Shib-Identity-Provider
+ federation_driver: keystone.contrib.federation.backends.sql.Federation
+ trusted_dashboard:
+ - https://${_param:cluster_public_host}/auth/websso/
+ - https://${_param:proxy_vip_host}/auth/websso/
+ auth_methods:
+ - saml2
+ - external