SAML federation authentication

Issue

• French universities have a Shibboleth SAML identity federation allowing to authenticate users from other universities from their home Identity providers. We would like to use this federation with our Openstack instance.

• We've seen this documentation on the Openstack web site.

• It's seems here that there are some possibilities to achieve our goal with keystone. But before trying to POC this thing, we would like to know : are these kind of configuration are supported by Red Hat Openstack version ?

• If not, is there any other way to do that ? I make clear that we don't want to connect to a single distant IDP, but to an existant SAML federation of multiples Shibboleth IDP.