Bug 1991134

Summary:	[RFE] add OIDCPassClaimsAs , OIDCClaimsDelimiter, OIDCPassUseerInfoAs to enable-federation-openidc.yaml
Product:	Red Hat OpenStack	Reporter:	Cristian Muresanu <cmuresan>
Component:	openstack-tripleo-heat-templates	Assignee:	Brendan Shephard <bshephar>
Status:	CLOSED DUPLICATE	QA Contact:	Joe H. Rahme <jhakimra>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	16.1 (Train)	CC:	bshephar, cmuresan, dwilde, mburns, mgalayda, ramishra
Target Milestone:	---	Keywords:	FutureFeature, Triaged
Target Release:	---
Hardware:	Unspecified
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-03-17 18:14:12 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Cristian Muresanu 2021-08-07 14:36:41 UTC

Description of problem:

We'd like to be able to add the following vars to enable-federation-openidc.yaml
- OIDCPassClaimsAs 
- OIDCClaimsDelimiter 
- OIDCPassUseerInfoAs 

That will help with future installations of OIDC for Openstack

Version-Release number of selected component (if applicable):


Additional info:

> Workaround:

Add to the keystone file under the file
 vi /var/lib/config-data/puppet-generated/keystone/etc/httpd/conf.d/10-keystone_wsgi.conf  
################################################################
##   added                                          ############
################################################################
  OIDCClaimDelimiter ";"
  OIDCPassUserInfoAs "claims"
  OIDCPassClaimsAs "both"

After adding the above vars to the file location on each controller I restart the keystone container 

#sudo podman restart keystone

Comment 2 Dave Wilde 2022-03-17 18:14:12 UTC


*** This bug has been marked as a duplicate of bug 1590932 ***