Skip to content

Commit f5a9a73

Browse files
JuanPTMmaxwolfs
andauthored
Added documentation about example setup (#202)
Signed-off-by: Juan Pedro Torres <[email protected]> Co-authored-by: Max Wolfs <[email protected]>
1 parent e7474b5 commit f5a9a73

File tree

2 files changed

+22
-1
lines changed

2 files changed

+22
-1
lines changed
Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
# Example setup configuration in SCS deployment explained
2+
3+
The following document explains the idea behind the example configuration is done.
4+
The playbook creates a proxy realm used to connect with `Keystone`, a customer realm, the clients needed to connect the realms, the identity brokering for the customer realm, a login flow
5+
to be able to use the `home-IdP-discovery` plugin to redirect to the correct customer realm and an example user.
6+
SCS operators can find the playbook that creates the setup [here](https://github.com/osism/ansible-playbooks/blob/main/playbooks/infrastructure/keycloak-oidc-client-config.yml).
7+
8+
1. In the first place a proxy realm called `osism` on the example deployment. That realm will
9+
become the realm that will be conected to `Keystone`
10+
11+
2. A customer realm called `CustomerA` is created. On that realm a `OIDC` client is created to hook
12+
up the realm to the proxy realm. This is done via `Identity Brokering` in the proxy realm.
13+
14+
3. An `Identity provider` is configured in the `osism` realm, this is configured to be connected to
15+
the `CustomerA` realm. For that, a set of mappers are created, the default ones are a `hardcoded-attribute`
16+
that sets the domain where the user came from, and an `attribute-importer` mapper for the `openstack-default-project` that comes
17+
in the `OIDC` claim from the customer realm.
18+
19+
4. A new login flow has been created in the `osism` realm, this login flow is needed to use the `home-IdP-discovery` plugin.
20+
21+
5. Creation of an example user called `Alice`.

sidebarsDocs.js

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -354,7 +354,7 @@ const sidebarsDocs = {
354354
link: {
355355
type: 'generated-index'
356356
},
357-
items: ['iam/domain-manager-setup-and-usage']
357+
items: ['iam/domain-manager-setup-and-usage', 'iam/SCS-example-setup-configuration-description']
358358
},
359359
'iam/intra-SCS-federation-setup-description-for-osism-doc-operations'
360360
]

0 commit comments

Comments
 (0)