UPDATE ......From Tuesday 8 April 2025 we have changed the way that Single Sign-on works on this wiki. Please see here for more information:
Update
...
The system has been working, so far, but has several drawbacks and limitations: Users need separate credentials; SWITCHengines accounts are decoupled from the SWITCHaai accounts that were used to generate them; we cannot easily handle “interfederation”, i.e. eduGAIN.
In the following, we will present a few “user stories” that describe an imaginary world where Federated Identity Management is integrated nicely into OpenStack