2.4. Identity
Red Hat OpenStack Platform 8 introduces a number of new features for Identity Service:
- You can now configure Identity Provider-specific WebSSO. Previously, you had to configure WebSSO globally for keystone. With this update, you can configure WebSSO for each Identity Provider, directing dashboard queries to the individual endpoints, rather than performing additional discovery steps.
- New attributes are available for SAML assertion:
openstack_user_domainfor mapping user domains, andopenstack_project_domainfor mapping project domains. - Experimental support has been added for keystone tokenless authorization using X.509 SSL client certificates.
