openstack
/
keystone
Code Issues Proposed changes

Update doc with samltest.id 

testshib.org is no longer maintained. Now keystone
uses samltest.id for federation.

This patch updates the configuration doc for user
to configure SP with samltest.id.

Change-Id: I88fc0b115614c237a527f83b8ad742fe5238cae1
This commit is contained in:
Vishakha Agarwal 2018-12-26 15:52:31 +05:30
parent 7aa948242f
commit 67ecc72a05
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/source/admin/federation/mellon.rst
View File

@ -91,7 +91,7 @@ Keystone SP. You do not have to use the URL, but it is an easy way to uniquely
identify each Keystone SP. The second parameter is the full URL for the
endpoint path corresponding to the parameter `MellonEndpointPath`. Note that
the metadata generated by this script includes a signing key but not an
encryption key, and your IdP (such as testshib.org) may require an encryption
encryption key, and your IdP (such as samltest.id) may require an encryption
key. Simply change the node `<KeyDescriptor use="signing">` to
`<KeyDescriptor use="encryption">` or add another key to the file. Check your
IdP documentation for details.

8
doc/source/admin/federation/shibboleth.rst
View File

@ -111,11 +111,11 @@ file. You will want to change five settings:
<SSO entityID="https://myidp.example.com/v3/OS-FEDERATION/saml2/idp">
Example if testshib.org is the IdP:
Example if samltest.id is the IdP:
.. code-block:: xml
<SSO entityID="https://idp.testshib.org/idp/shibboleth">
<SSO entityID="https://samltest.id/saml/idp">
* Remove the discoveryURL lines unless you want to enable advanced IdP discovery.
@ -126,11 +126,11 @@ Example if testshib.org is the IdP:
<MetadataProvider type="XML" uri="https://myidp.example.com:5000/v3/OS-FEDERATION/saml2/metadata"/>
Example if testshib.org is the IdP:
Example if samltest.id is the IdP:
.. code-block:: xml
<MetadataProvider type="XML" uri="http://www.testshib.org/metadata/testshib-providers.xml" />
<MetadataProvider type="XML" uri="https://samltest.id/saml/idp" />
You are advised to examine `Shibboleth Service Provider Configuration documentation <https://wiki.shibboleth.net/confluence/display/SHIB2/Configuration>`_