)]}'
{"specs/kilo/federated-direct-user-mapping.rst":[{"author":{"_account_id":6460,"name":"Brad Topol","email":"btopol@us.ibm.com","username":"btopol"},"change_message_id":"4ce68b22a6425546e1606c75ca2203c14a46ebfd","unresolved":false,"context_lines":[{"line_number":24,"context_line":"handled by the first class Identity Provider, but the user exists in the"},{"line_number":25,"context_line":"Identity backend."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"This problem is manifested in many ways, firstly when an ephemeral user obtains"},{"line_number":28,"context_line":"a token, the user section of the token does not have a \u0027domain\u0027 portion. This,"},{"line_number":29,"context_line":"breaks the API contract we established when obtaining tokens. Currently,"},{"line_number":30,"context_line":"consuming projects work around this issue by checking to see if \u0027OS-FEDERATION\u0027"}],"source_content_type":"text/x-rst","patch_set":1,"id":"da86d52c_501cbdc1","line":27,"updated":"2015-02-02 21:44:47.000000000","message":"Great answer! very helpful","commit_id":"2d101a4f15b962d86dc89a3a3b11d1619b16bdc2"}]}