)]}'
{"doc/config-reference/source/identity/federated-identity.rst":[{"author":{"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},"change_message_id":"f85482a6a8509a92a32c6af2b8a4d29504934741","unresolved":false,"context_lines":[{"line_number":2,"context_line":"Federated Identity"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"* `Service Provider (SP)`: provides a service to an end-user."},{"line_number":6,"context_line":"* `Identity Provider (IdP)`: service that stores information about users and"},{"line_number":7,"context_line":"  groups."},{"line_number":8,"context_line":"* `SAML assertion`: contains information about a user as provided by an IdP."}],"source_content_type":"text/x-rst","patch_set":3,"id":"1aa78d24_4322f8b9","line":5,"updated":"2016-07-13 15:09:34.000000000","message":"and consumes the user\u0027s identity from the identity provider, via SAML","commit_id":"93c1908742ea0df3fffa24894de2adb22a68797c"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"b0e2f036b39b3573c6be58fdcdd74e9529d56b00","unresolved":false,"context_lines":[{"line_number":2,"context_line":"Federated Identity"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"* `Service Provider (SP)`: provides a service to an end-user."},{"line_number":6,"context_line":"* `Identity Provider (IdP)`: service that stores information about users and"},{"line_number":7,"context_line":"  groups."},{"line_number":8,"context_line":"* `SAML assertion`: contains information about a user as provided by an IdP."}],"source_content_type":"text/x-rst","patch_set":3,"id":"1aa78d24_4966692a","line":5,"in_reply_to":"1aa78d24_4322f8b9","updated":"2016-07-14 10:54:04.000000000","message":"Done","commit_id":"93c1908742ea0df3fffa24894de2adb22a68797c"},{"author":{"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},"change_message_id":"f85482a6a8509a92a32c6af2b8a4d29504934741","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"* `Service Provider (SP)`: provides a service to an end-user."},{"line_number":6,"context_line":"* `Identity Provider (IdP)`: service that stores information about users and"},{"line_number":7,"context_line":"  groups."},{"line_number":8,"context_line":"* `SAML assertion`: contains information about a user as provided by an IdP."},{"line_number":9,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"1aa78d24_435b1854","line":6,"updated":"2016-07-13 15:09:34.000000000","message":"+1 this is also the preferred abbreviation (with the lowercase \u0027d\u0027).","commit_id":"93c1908742ea0df3fffa24894de2adb22a68797c"},{"author":{"_account_id":22141,"name":"Rodrigo Caballero","email":"rodrigo.caballero.abraham@intel.com","username":"rcaballeromx"},"change_message_id":"53ec725d9e39a6bd722e0337a8cd2e6cc62e547f","unresolved":false,"context_lines":[{"line_number":2,"context_line":"Federated Identity"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"* `Service Provider (SP)`: provides a service to an end-user and consumes the"},{"line_number":6,"context_line":"   user\u0027s identity from the identity provider, via SAML."},{"line_number":7,"context_line":"* `Identity Provider (IdP)`: service that stores information about users and"},{"line_number":8,"context_line":"  groups."}],"source_content_type":"text/x-rst","patch_set":4,"id":"dada55a8_f91723eb","line":5,"range":{"start_line":5,"start_character":2,"end_line":5,"end_character":25},"updated":"2016-07-18 14:51:12.000000000","message":"Why are you not using abbr:`Service Provider (SP)`\n?","commit_id":"c40039c600112d89b9cce5e0ad69b06aa9bd2246"},{"author":{"_account_id":22141,"name":"Rodrigo Caballero","email":"rodrigo.caballero.abraham@intel.com","username":"rcaballeromx"},"change_message_id":"53ec725d9e39a6bd722e0337a8cd2e6cc62e547f","unresolved":false,"context_lines":[{"line_number":4,"context_line":""},{"line_number":5,"context_line":"* `Service Provider (SP)`: provides a service to an end-user and consumes the"},{"line_number":6,"context_line":"   user\u0027s identity from the identity provider, via SAML."},{"line_number":7,"context_line":"* `Identity Provider (IdP)`: service that stores information about users and"},{"line_number":8,"context_line":"  groups."},{"line_number":9,"context_line":"* `SAML assertion`: contains information about a user as provided by an IdP."},{"line_number":10,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"dada55a8_99dd4745","line":7,"range":{"start_line":7,"start_character":2,"end_line":7,"end_character":27},"updated":"2016-07-18 14:51:12.000000000","message":"ditto","commit_id":"c40039c600112d89b9cce5e0ad69b06aa9bd2246"}],"doc/config-reference/source/identity/token-provider.rst":[{"author":{"_account_id":10897,"name":"Joseph Robinson","email":"josephremail@gmail.com","username":"RobiJoe"},"change_message_id":"04cea5cbeb009251cd9bda480343d55609fcf538","unresolved":false,"context_lines":[{"line_number":13,"context_line":"  Implemented by :class:`keystone.token.providers.uuid.Provider`"},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"Each token format uses different technologies to achieve various performance,"},{"line_number":16,"context_line":"scaling and architectural requirements."},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"Below is the detailed list of the tokens:"},{"line_number":19,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"1aa78d24_5f0d84e7","line":16,"updated":"2016-07-14 06:01:08.000000000","message":"Add a serial comma here - \"..scaling, and architectural requirements.\"","commit_id":"93c1908742ea0df3fffa24894de2adb22a68797c"},{"author":{"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},"change_message_id":"f85482a6a8509a92a32c6af2b8a4d29504934741","unresolved":false,"context_lines":[{"line_number":15,"context_line":"Each token format uses different technologies to achieve various performance,"},{"line_number":16,"context_line":"scaling and architectural requirements."},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"Below is the detailed list of the tokens:"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"#. UUID"},{"line_number":21,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"1aa78d24_9e60b3d0","line":18,"updated":"2016-07-13 15:09:34.000000000","message":"token formats*","commit_id":"93c1908742ea0df3fffa24894de2adb22a68797c"},{"author":{"_account_id":14962,"name":"ologvinova","email":"ologvinova@mirantis.com","username":"ologvinova"},"change_message_id":"ae576f91d0f4a0e63216f3316fcd44417eaa4d77","unresolved":false,"context_lines":[{"line_number":17,"context_line":""},{"line_number":18,"context_line":"Below is the detailed list of the tokens:"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"#. UUID"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"   UUID tokens contain randomly generated UUID4 payloads that are issued and"},{"line_number":23,"context_line":"   validated by the Identity service. They must be persisted by the Identity"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1aa78d24_486a10b4","line":20,"range":{"start_line":20,"start_character":3,"end_line":20,"end_character":7},"updated":"2016-07-13 15:49:44.000000000","message":"You may want to create a definition list from these items (http://docs.openstack.org/contributor-guide/rst-conv/lists.html)","commit_id":"93c1908742ea0df3fffa24894de2adb22a68797c"},{"author":{"_account_id":10705,"name":"Darren Chan","email":"dazzachan@yahoo.com.au","username":"daz"},"change_message_id":"18e3b9dc952a1a48fd4569ea3293fd014975884b","unresolved":false,"context_lines":[{"line_number":17,"context_line":""},{"line_number":18,"context_line":"Below is the detailed list of the tokens:"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"#. UUID"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"   UUID tokens contain randomly generated UUID4 payloads that are issued and"},{"line_number":23,"context_line":"   validated by the Identity service. They must be persisted by the Identity"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1aa78d24_dc6a2281","line":20,"range":{"start_line":20,"start_character":3,"end_line":20,"end_character":7},"in_reply_to":"1aa78d24_486a10b4","updated":"2016-07-14 05:31:41.000000000","message":"+1","commit_id":"93c1908742ea0df3fffa24894de2adb22a68797c"},{"author":{"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},"change_message_id":"f85482a6a8509a92a32c6af2b8a4d29504934741","unresolved":false,"context_lines":[{"line_number":21,"context_line":""},{"line_number":22,"context_line":"   UUID tokens contain randomly generated UUID4 payloads that are issued and"},{"line_number":23,"context_line":"   validated by the Identity service. They must be persisted by the Identity"},{"line_number":24,"context_line":"   service in order to be later validated."},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"#. PKI and PKIZ"},{"line_number":27,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"1aa78d24_1ea32301","line":24,"updated":"2016-07-13 15:09:34.000000000","message":"+1","commit_id":"93c1908742ea0df3fffa24894de2adb22a68797c"},{"author":{"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},"change_message_id":"f85482a6a8509a92a32c6af2b8a4d29504934741","unresolved":false,"context_lines":[{"line_number":29,"context_line":"   validation response that would normally be retrieved from keystone."},{"line_number":30,"context_line":"   You can verify PKI and PKIZ offline using the Identity service\u0027s public"},{"line_number":31,"context_line":"   signing key. Both PKI and PKIZ tokens require signing certificates which"},{"line_number":32,"context_line":"   may be created using ``keystone-manage pki_setup`` for demonstration"},{"line_number":33,"context_line":"   purposes."},{"line_number":34,"context_line":""},{"line_number":35,"context_line":"   .. note::"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1aa78d24_5e748b66","line":32,"updated":"2016-07-13 15:09:34.000000000","message":"I\u0027d suggesting clarifying \"demonstration\" as strictly \"non-production\", because they\u0027re self-signed certificates... and you could also combine this all with the note below, like:\n\n  Both PKI and PKIZ tokens require signing certificates. For\n  non-production environments, self-signed certificates may\n  be created using ``keystone-manage pki_setup``. For\n  production environments, use certificates issued by a trusted\n  certificate authority.","commit_id":"93c1908742ea0df3fffa24894de2adb22a68797c"},{"author":{"_account_id":10705,"name":"Darren Chan","email":"dazzachan@yahoo.com.au","username":"daz"},"change_message_id":"18e3b9dc952a1a48fd4569ea3293fd014975884b","unresolved":false,"context_lines":[{"line_number":35,"context_line":"   .. note::"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"      We do not recommend this action for production deployments. Use certificates"},{"line_number":38,"context_line":"      issued by an trusted certificate authority."},{"line_number":39,"context_line":""},{"line_number":40,"context_line":"#. Fernet"},{"line_number":41,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"1aa78d24_5c0d92e7","line":38,"range":{"start_line":38,"start_character":16,"end_line":38,"end_character":18},"updated":"2016-07-14 05:31:41.000000000","message":"s/an/a","commit_id":"93c1908742ea0df3fffa24894de2adb22a68797c"},{"author":{"_account_id":22141,"name":"Rodrigo Caballero","email":"rodrigo.caballero.abraham@intel.com","username":"rcaballeromx"},"change_message_id":"53ec725d9e39a6bd722e0337a8cd2e6cc62e547f","unresolved":false,"context_lines":[{"line_number":17,"context_line":""},{"line_number":18,"context_line":"Below is the detailed list of the token formats:"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"UUID"},{"line_number":21,"context_line":" UUID tokens contain randomly generated UUID4 payloads that are issued and"},{"line_number":22,"context_line":" validated by the Identity service. They must be persisted by the Identity"},{"line_number":23,"context_line":" service in order to be later validated."}],"source_content_type":"text/x-rst","patch_set":4,"id":"dada55a8_4ebca36c","line":20,"range":{"start_line":20,"start_character":0,"end_line":20,"end_character":4},"updated":"2016-07-18 14:51:12.000000000","message":"Are these subheadings? Glossary entries? I am guessing there is some markup missing here.","commit_id":"c40039c600112d89b9cce5e0ad69b06aa9bd2246"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"aa1a55e615e4345a6a034ba4454a1b3a92593ab2","unresolved":false,"context_lines":[{"line_number":17,"context_line":""},{"line_number":18,"context_line":"Below is the detailed list of the token formats:"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"UUID"},{"line_number":21,"context_line":" UUID tokens contain randomly generated UUID4 payloads that are issued and"},{"line_number":22,"context_line":" validated by the Identity service. They must be persisted by the Identity"},{"line_number":23,"context_line":" service in order to be later validated."}],"source_content_type":"text/x-rst","patch_set":4,"id":"dada55a8_ffd8a31f","line":20,"range":{"start_line":20,"start_character":0,"end_line":20,"end_character":4},"in_reply_to":"dada55a8_4ebca36c","updated":"2016-07-18 15:27:46.000000000","message":"Replying inline: http://docs.openstack.org/contributor-guide/rst-conv/lists.html\n\n\nThey are definition lists :)","commit_id":"c40039c600112d89b9cce5e0ad69b06aa9bd2246"},{"author":{"_account_id":22141,"name":"Rodrigo Caballero","email":"rodrigo.caballero.abraham@intel.com","username":"rcaballeromx"},"change_message_id":"53ec725d9e39a6bd722e0337a8cd2e6cc62e547f","unresolved":false,"context_lines":[{"line_number":22,"context_line":" validated by the Identity service. They must be persisted by the Identity"},{"line_number":23,"context_line":" service in order to be later validated."},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"PKI and PKIZ"},{"line_number":26,"context_line":" PKI and PKIZ tokens contain JSON payloads that represent the entire token"},{"line_number":27,"context_line":" validation response that would normally be retrieved from keystone."},{"line_number":28,"context_line":" You can verify PKI and PKIZ offline using the Identity service\u0027s public"}],"source_content_type":"text/x-rst","patch_set":4,"id":"dada55a8_6e7247e7","line":25,"range":{"start_line":25,"start_character":0,"end_line":25,"end_character":12},"updated":"2016-07-18 14:51:12.000000000","message":"It applies here as well.","commit_id":"c40039c600112d89b9cce5e0ad69b06aa9bd2246"},{"author":{"_account_id":22141,"name":"Rodrigo Caballero","email":"rodrigo.caballero.abraham@intel.com","username":"rcaballeromx"},"change_message_id":"53ec725d9e39a6bd722e0337a8cd2e6cc62e547f","unresolved":false,"context_lines":[{"line_number":33,"context_line":""},{"line_number":34,"context_line":" .. note::"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"    We do not recommend this action for production deployments. Use certificates"},{"line_number":37,"context_line":"    issued by a trusted certificate authority."},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"Fernet"}],"source_content_type":"text/x-rst","patch_set":4,"id":"dada55a8_f931e3ed","line":36,"range":{"start_line":36,"start_character":23,"end_line":36,"end_character":35},"updated":"2016-07-18 14:51:12.000000000","message":"What action? Reference is unclear.","commit_id":"c40039c600112d89b9cce5e0ad69b06aa9bd2246"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"305328a763c035232091b3b15da29403e858f448","unresolved":false,"context_lines":[{"line_number":33,"context_line":""},{"line_number":34,"context_line":" .. note::"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"    We do not recommend this action for production deployments. Use certificates"},{"line_number":37,"context_line":"    issued by a trusted certificate authority."},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"Fernet"}],"source_content_type":"text/x-rst","patch_set":4,"id":"dada55a8_3f36bb03","line":36,"range":{"start_line":36,"start_character":23,"end_line":36,"end_character":35},"in_reply_to":"dada55a8_f931e3ed","updated":"2016-07-18 15:29:45.000000000","message":"This note was supposed to be removed, thanks :)","commit_id":"c40039c600112d89b9cce5e0ad69b06aa9bd2246"},{"author":{"_account_id":22141,"name":"Rodrigo Caballero","email":"rodrigo.caballero.abraham@intel.com","username":"rcaballeromx"},"change_message_id":"53ec725d9e39a6bd722e0337a8cd2e6cc62e547f","unresolved":false,"context_lines":[{"line_number":36,"context_line":"    We do not recommend this action for production deployments. Use certificates"},{"line_number":37,"context_line":"    issued by a trusted certificate authority."},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"Fernet"},{"line_number":40,"context_line":" Fernet tokens contain a limited amount of identity and authorization data"},{"line_number":41,"context_line":" in a `MessagePacked \u003chttp://msgpack.org/\u003e`_ payload. Fernet tokens require"},{"line_number":42,"context_line":" symmetric encryption keys which can be established using"}],"source_content_type":"text/x-rst","patch_set":4,"id":"dada55a8_b965abe2","line":39,"range":{"start_line":39,"start_character":0,"end_line":39,"end_character":6},"updated":"2016-07-18 14:51:12.000000000","message":"Another subheading missing markup perhaps?","commit_id":"c40039c600112d89b9cce5e0ad69b06aa9bd2246"}]}