Hi, Currently it is possible to enable keystone federation support with mod_auth_openidc against openid connect providers (google, etc). However, this only works for websso with horizon, python-keystoneclient and python-openstackclient are unable to utilise this federation. This RFE is to add cli support for this type of federation Regards, Graeme