Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/federated-direct-user-mapping. Description: Allow for specifying mapping rules where effective user must exist in the backend. Otherwise map users to default domain named federated. Specification URL (additional information): None