Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/generic-mapping-federation.
We propose that the federated authentication process be reengineered so that
a user_id is returned alongside the identity attributes. In addition the
saml2.py authentication module should be renamed as mapped.py to denote that it
applies to all authentication methods which require the asserted identity
attributes to be mapped into local attributes.
Specification URL (additional information):
This bug has been closed as a part of the RHEL-OSP 6 general availability release. For details, see https://rhn.redhat.com/errata/rhel7-rhos-6-errata.html