diff options
| author | fzakfeld <freerk@zakfeld.com> | 2023-08-26 10:53:29 +0200 |
|---|---|---|
| committer | Michal Nasiadka <mnasiadka@gmail.com> | 2023-11-15 15:49:35 +0100 |
| commit | 85be68126e1220a1b2bb879188a1290db0f6edb5 (patch) | |
| tree | 19e181afb65ca49ba587ee95c2600ec892f07b1f /doc | |
| parent | 28bf63f269087cefae0fe609c42971d306c9d73c (diff) | |
| download | kolla-ansible-85be68126e1220a1b2bb879188a1290db0f6edb5.tar.gz kolla-ansible-85be68126e1220a1b2bb879188a1290db0f6edb5.zip | |
keystone: Add support for OIDC options
Introduce keystone_federation_oidc_additional_options variable
Change-Id: I39b9f35dab6f4e3ac2fcb505aabd2589e6e2ca69
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/source/reference/shared-services/keystone-guide.rst | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/doc/source/reference/shared-services/keystone-guide.rst b/doc/source/reference/shared-services/keystone-guide.rst index dc3d766c5..c0f157cb8 100644 --- a/doc/source/reference/shared-services/keystone-guide.rst +++ b/doc/source/reference/shared-services/keystone-guide.rst @@ -96,6 +96,14 @@ used by OpenStack command line client. Example config shown below: keystone_federation_oidc_jwks_uri: "https://<AUTH PROVIDER>/<ID>/discovery/v2.0/keys" +Some identity providers need additional mod_auth_openidc config. +Example for Keycloak shown below: + +.. code-block:: yaml + + keystone_federation_oidc_additional_options: + OIDCTokenBindingPolicy: disabled + Identity providers configurations ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |