Cloned from launchpad blueprint https://blueprints.launchpad.net/horizon/+spec/domain-admin-support.
Allow Horizon to support Domain Admin login:
1. Add support for Domain scoped tokens
2. Remove requirement during User creation to have a primary project. Domain Admin may not be interacting with OpenStack services (Nova, Cinder, Swift, etc), they would be only talking to Keystone and would just use the Domain scoped token rather than project scoped token,
Specification URL (additional information):
The only feature added here is (or how to test):
when using keystone v3, creating a user doesn't require to select a primary project for a newly created user.
When on keystone v2, a primary project for a new user should be still required.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.