"As a federated user, I want to use both horizon/web frontend and the CLI/APIs to do my work efficiently"
Horizon integration with SAML based federated AAI should be available out-of-the-box(ish) in OpenStack. This is assuming Keystone federation is set up properly.
How is this handled in case of not using Horizon. More serious users will need API access. How to the CLI tools and the REST API work with federated SAML based authentication. What are the dependencies for this? SAML ECP?