)]}'
{"doc/source/configure_federation.rst":[{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"2ef48f7f76d10869cc3b742e54d017ca9807229d","unresolved":false,"context_lines":[{"line_number":290,"context_line":"Keystone as an Identity Provider (IdP)"},{"line_number":291,"context_line":"--------------------------------------"},{"line_number":292,"context_line":""},{"line_number":293,"context_line":"Configure Options"},{"line_number":294,"context_line":"-----------------"},{"line_number":295,"context_line":""},{"line_number":296,"context_line":"There are certain settings in ``keystone.conf`` that must be setup, prior to"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_113e1fb8","line":293,"updated":"2014-09-15 17:17:32.000000000","message":"Configuration?","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"d7c569f7bbfc6ce643d2cef5bc4f399f74f745c8","unresolved":false,"context_lines":[{"line_number":290,"context_line":"Keystone as an Identity Provider (IdP)"},{"line_number":291,"context_line":"--------------------------------------"},{"line_number":292,"context_line":""},{"line_number":293,"context_line":"Configure Options"},{"line_number":294,"context_line":"-----------------"},{"line_number":295,"context_line":""},{"line_number":296,"context_line":"There are certain settings in ``keystone.conf`` that must be setup, prior to"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_8c94b437","line":293,"in_reply_to":"fa98f980_113e1fb8","updated":"2014-09-15 18:09:31.000000000","message":"Done","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"0069a6adb1fce9e41fc1fee5d1b788386e8c2b74","unresolved":false,"context_lines":[{"line_number":294,"context_line":"-----------------"},{"line_number":295,"context_line":""},{"line_number":296,"context_line":"There are certain settings in ``keystone.conf`` that must be setup, prior to"},{"line_number":297,"context_line":"attempting to federate multiple Keystones."},{"line_number":298,"context_line":""},{"line_number":299,"context_line":"Within ``keystone.conf``, assign values to the ``[saml]`` related fields, for"},{"line_number":300,"context_line":"example:"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_5376efa4","line":297,"updated":"2014-09-15 16:05:54.000000000","message":"s/Keystones/Keystone deployments/\n\ns/Keystones/Keystone servers/ \n\n?","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"2ef48f7f76d10869cc3b742e54d017ca9807229d","unresolved":false,"context_lines":[{"line_number":294,"context_line":"-----------------"},{"line_number":295,"context_line":""},{"line_number":296,"context_line":"There are certain settings in ``keystone.conf`` that must be setup, prior to"},{"line_number":297,"context_line":"attempting to federate multiple Keystones."},{"line_number":298,"context_line":""},{"line_number":299,"context_line":"Within ``keystone.conf``, assign values to the ``[saml]`` related fields, for"},{"line_number":300,"context_line":"example:"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_91a04ff5","line":297,"in_reply_to":"fa98f980_5376efa4","updated":"2014-09-15 17:17:32.000000000","message":"I think I like deployments here because at the summit I was talking to lots of people already using multiple servers in a standard load balanced configuration.","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"d7c569f7bbfc6ce643d2cef5bc4f399f74f745c8","unresolved":false,"context_lines":[{"line_number":294,"context_line":"-----------------"},{"line_number":295,"context_line":""},{"line_number":296,"context_line":"There are certain settings in ``keystone.conf`` that must be setup, prior to"},{"line_number":297,"context_line":"attempting to federate multiple Keystones."},{"line_number":298,"context_line":""},{"line_number":299,"context_line":"Within ``keystone.conf``, assign values to the ``[saml]`` related fields, for"},{"line_number":300,"context_line":"example:"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_eca460a7","line":297,"in_reply_to":"fa98f980_91a04ff5","updated":"2014-09-15 18:09:31.000000000","message":"went with deployments","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"2ef48f7f76d10869cc3b742e54d017ca9807229d","unresolved":false,"context_lines":[{"line_number":313,"context_line":""},{"line_number":314,"context_line":".. code-block:: ini"},{"line_number":315,"context_line":""},{"line_number":316,"context_line":"    idp_organization_name\u003dexample_company"},{"line_number":317,"context_line":"    idp_organization_display_name\u003dExample Corp."},{"line_number":318,"context_line":"    idp_organization_url\u003dexample.com"},{"line_number":319,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_f197db8d","line":316,"updated":"2014-09-15 17:17:32.000000000","message":"Why is this different from \"display name\"? Does it have to be URL safe?","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"a143f7bb15b89871bf8416b1e5d506fe4d6b7a9e","unresolved":false,"context_lines":[{"line_number":313,"context_line":""},{"line_number":314,"context_line":".. code-block:: ini"},{"line_number":315,"context_line":""},{"line_number":316,"context_line":"    idp_organization_name\u003dexample_company"},{"line_number":317,"context_line":"    idp_organization_display_name\u003dExample Corp."},{"line_number":318,"context_line":"    idp_organization_url\u003dexample.com"},{"line_number":319,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_47fc65b5","line":316,"in_reply_to":"fa98f980_4c7accba","updated":"2014-09-15 18:17:57.000000000","message":"Nice, thanks. Yeah, looking at this it was not clean why I would need two different names.","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"d7c569f7bbfc6ce643d2cef5bc4f399f74f745c8","unresolved":false,"context_lines":[{"line_number":313,"context_line":""},{"line_number":314,"context_line":".. code-block:: ini"},{"line_number":315,"context_line":""},{"line_number":316,"context_line":"    idp_organization_name\u003dexample_company"},{"line_number":317,"context_line":"    idp_organization_display_name\u003dExample Corp."},{"line_number":318,"context_line":"    idp_organization_url\u003dexample.com"},{"line_number":319,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_4c7accba","line":316,"in_reply_to":"fa98f980_f197db8d","updated":"2014-09-15 18:09:31.000000000","message":"@stanek, the reasoning between org display name and name is in the docs:\n\n  \"organization\": {\n    \"name\": [(\"Example Company\",\"en\"), (\"Exempel AB\",\"se\")],\n    \"display_name\": [\"Exempel AB\"],\n    \"url\": [(\"http://example.com\",\"en\"),(\"http://exempel.se\",\"se\")],\n  }\n\nI can\u0027t find any docs that say URL safe specifically, but they clearly should be, since it\u0027ll mess up the XML transformation otherwise. I\u0027ve added a note.","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"8f18a4274df7769e4def79404f0a9c7d1cc41eb9","unresolved":false,"context_lines":[{"line_number":332,"context_line":"Generate Metadata"},{"line_number":333,"context_line":"-----------------"},{"line_number":334,"context_line":""},{"line_number":335,"context_line":"In order to create a trust between the IdP and SP, metadata must be exchanged,"},{"line_number":336,"context_line":"to create metadata for your Keystone IdP, run the ``keystone-manage`` command"},{"line_number":337,"context_line":"and pipe the output to a file. For example:"},{"line_number":338,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_cca6bc0e","line":335,"updated":"2014-09-15 17:46:04.000000000","message":"Split into 2 sentences: \n\n\"...metadata must be exchanged. To create metadata for your..\"","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"d7c569f7bbfc6ce643d2cef5bc4f399f74f745c8","unresolved":false,"context_lines":[{"line_number":332,"context_line":"Generate Metadata"},{"line_number":333,"context_line":"-----------------"},{"line_number":334,"context_line":""},{"line_number":335,"context_line":"In order to create a trust between the IdP and SP, metadata must be exchanged,"},{"line_number":336,"context_line":"to create metadata for your Keystone IdP, run the ``keystone-manage`` command"},{"line_number":337,"context_line":"and pipe the output to a file. For example:"},{"line_number":338,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_8c4f5491","line":335,"in_reply_to":"fa98f980_cca6bc0e","updated":"2014-09-15 18:09:31.000000000","message":"Done","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"2ef48f7f76d10869cc3b742e54d017ca9807229d","unresolved":false,"context_lines":[{"line_number":349,"context_line":""},{"line_number":350,"context_line":"Create a new region for the service provider, in this example, we are creating"},{"line_number":351,"context_line":"a new region with an ID of ``BETA``, and URL of"},{"line_number":352,"context_line":"``http://beta.com/Shibboleth.sso/SAML2/POST``. This URL will be used when"},{"line_number":353,"context_line":"creating a SAML assertion for ``BETA``, and signed by the current Keystone IdP."},{"line_number":354,"context_line":""},{"line_number":355,"context_line":".. code-block:: bash"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_f1fa7bbb","line":352,"updated":"2014-09-15 17:17:32.000000000","message":"Are these URLs typically http and not https?","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"8f18a4274df7769e4def79404f0a9c7d1cc41eb9","unresolved":false,"context_lines":[{"line_number":349,"context_line":""},{"line_number":350,"context_line":"Create a new region for the service provider, in this example, we are creating"},{"line_number":351,"context_line":"a new region with an ID of ``BETA``, and URL of"},{"line_number":352,"context_line":"``http://beta.com/Shibboleth.sso/SAML2/POST``. This URL will be used when"},{"line_number":353,"context_line":"creating a SAML assertion for ``BETA``, and signed by the current Keystone IdP."},{"line_number":354,"context_line":""},{"line_number":355,"context_line":".. code-block:: bash"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_2cb7483b","line":352,"in_reply_to":"fa98f980_f1fa7bbb","updated":"2014-09-15 17:46:04.000000000","message":"rather https, changed.","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"2ef48f7f76d10869cc3b742e54d017ca9807229d","unresolved":false,"context_lines":[{"line_number":355,"context_line":".. code-block:: bash"},{"line_number":356,"context_line":""},{"line_number":357,"context_line":"    $ curl -s -X PUT \\"},{"line_number":358,"context_line":"      -H \"X-Auth-Token: $OS_TOKEN\" \\"},{"line_number":359,"context_line":"      -H \"Content-Type: application/json\" \\"},{"line_number":360,"context_line":"      -d \u0027{\"region\": {\"url\": \"http://beta.com/Shibboleth.sso/SAML2/POST\"}}\u0027 \\"},{"line_number":361,"context_line":"      http://localhost:5000/v3/regions/BETA | python -mjson.tool"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_b1a9d391","line":358,"updated":"2014-09-15 17:17:32.000000000","message":"Is having the OS_TOKEN  set a convention already in the docs? I\u0027m not saying this is bad, I just don\u0027t know what the audience already knows.","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"d7c569f7bbfc6ce643d2cef5bc4f399f74f745c8","unresolved":false,"context_lines":[{"line_number":355,"context_line":".. code-block:: bash"},{"line_number":356,"context_line":""},{"line_number":357,"context_line":"    $ curl -s -X PUT \\"},{"line_number":358,"context_line":"      -H \"X-Auth-Token: $OS_TOKEN\" \\"},{"line_number":359,"context_line":"      -H \"Content-Type: application/json\" \\"},{"line_number":360,"context_line":"      -d \u0027{\"region\": {\"url\": \"http://beta.com/Shibboleth.sso/SAML2/POST\"}}\u0027 \\"},{"line_number":361,"context_line":"      http://localhost:5000/v3/regions/BETA | python -mjson.tool"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_2c56682a","line":358,"in_reply_to":"fa98f980_b1a9d391","updated":"2014-09-15 18:09:31.000000000","message":"I believe so, Brant started it in here: http://docs.openstack.org/developer/keystone/api_curl_examples.html","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"2ef48f7f76d10869cc3b742e54d017ca9807229d","unresolved":false,"context_lines":[{"line_number":361,"context_line":"      http://localhost:5000/v3/regions/BETA | python -mjson.tool"},{"line_number":362,"context_line":""},{"line_number":363,"context_line":"Exchange Token for SAML Assertion"},{"line_number":364,"context_line":"---------------------------------"},{"line_number":365,"context_line":""},{"line_number":366,"context_line":"Lastly, if a scoped token and a Service Provider region are presented to"},{"line_number":367,"context_line":"Keystone, the result will be a full SAML Assertion, signed by the IdP"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_516fc75f","line":364,"updated":"2014-09-15 17:17:32.000000000","message":"Should this be called out a as test to make sure the configuration worked? It\u0027s not really a stop in the configuration right?","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"d7c569f7bbfc6ce643d2cef5bc4f399f74f745c8","unresolved":false,"context_lines":[{"line_number":361,"context_line":"      http://localhost:5000/v3/regions/BETA | python -mjson.tool"},{"line_number":362,"context_line":""},{"line_number":363,"context_line":"Exchange Token for SAML Assertion"},{"line_number":364,"context_line":"---------------------------------"},{"line_number":365,"context_line":""},{"line_number":366,"context_line":"Lastly, if a scoped token and a Service Provider region are presented to"},{"line_number":367,"context_line":"Keystone, the result will be a full SAML Assertion, signed by the IdP"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_4c51ec2e","line":364,"in_reply_to":"fa98f980_516fc75f","updated":"2014-09-15 18:09:31.000000000","message":"you are definitely right, i renamed the section","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"8f18a4274df7769e4def79404f0a9c7d1cc41eb9","unresolved":false,"context_lines":[{"line_number":375,"context_line":"      http://localhost:5000/v3/auth/OS-FEDERATION/saml2"},{"line_number":376,"context_line":""},{"line_number":377,"context_line":"At which point the SAML Assertion can be sent to the Service Provider Keystone"},{"line_number":378,"context_line":"and receive a token that is valid at that Service Provider."}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_cc595cfe","line":378,"updated":"2014-09-15 17:46:04.000000000","message":"Is this sentece correct? \nHow about:\nAt this point the SAML Assertion can be sent to the Service Provider Keystone, and a valid OpenStack roken, issued by a Service Provider Keystone, will be returned.","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"d7c569f7bbfc6ce643d2cef5bc4f399f74f745c8","unresolved":false,"context_lines":[{"line_number":375,"context_line":"      http://localhost:5000/v3/auth/OS-FEDERATION/saml2"},{"line_number":376,"context_line":""},{"line_number":377,"context_line":"At which point the SAML Assertion can be sent to the Service Provider Keystone"},{"line_number":378,"context_line":"and receive a token that is valid at that Service Provider."}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa98f980_8c367401","line":378,"in_reply_to":"fa98f980_cc595cfe","updated":"2014-09-15 18:09:31.000000000","message":"Done","commit_id":"a0a0850dd00a855917f5fdf650a731a095dc68a3"}]}