Description of problem: OSP12 brought in containers, and seems like the RH-SSO federation docs were updated to reflect that, but not all the way. Examples Steps: #4.7: the apache module should be in the keystone container, not installed via yum [0] #4.10-11: keycloak-httpd-client-install command places files under /etc/httpd but 4.11 refers to changing files in the right spot, /var/lib/config-data/puppet-generated/keystone/etc/httpd/ #4.12: Files created in step 4.10 are not in /var/lib/config-data/puppet-generated/keystone/etc/httpd/ as the command assumes. Either 4.10 should be run in the container(?) or command should be: tar -cvzf rhsso_config.tar.gz \ --exclude '*.orig' \ --exclude '*~' \ --transform 's,^etc/,/var/lib/config-data/puppet-generated/keystone/etc/,' \ /etc/httpd/saml2 \ /etc/httpd/conf.d/v3_mellon_keycloak_realm01.conf [0]: https://bugzilla.redhat.com/show_bug.cgi?id=1573316 Version-Release number of selected component (if applicable): https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/12/html-single/federate_with_identity_service/#steps