To enable the federation extension:
Add the federation extension driver to the [federation] section in keystone.conf. For example:
[federation]
driver = keystone.contrib.federation.backends.sql.Federation
Add the saml2 authentication method to the [auth] section in keystone.conf:
[auth]
methods = external,password,token,saml2
saml2 = keystone.auth.plugins.saml2.Saml2
Add the federation_extension middleware to the api_v3 pipeline in keystone-paste.ini. For example:
[pipeline:api_v3]
pipeline = access_log sizelimit url_normalize token_auth admin_token_auth
xml_body json_body ec2_extension s3_extension federation_extension
service_v3
Create the federation extension tables if using the provided SQL backend. For example:
./bin/keystone-manage db_sync --extension federation