OpenID Connect: The bridge between an Azure AD identity & your cloud platforms
summary
Demonstrates configuring OpenStack and OpenShift/Kubernetes to use Azure AD via OpenID Connect: registers an Azure application to get client ID and secret, sets the issuer and redirect URI, deploys OpenStack with TripleO deployment and enables federation, and wires OpenShift cluster OAuth to Azure. Maps claims to projects using a mapping.json rules file. Live demos succeed after fixing a missing redirect URI; CLI SSO is partially working and Kerberos or local fallbacks are recommended to avoid total lockout if Azure connectivity or a proxy fails.
AI-written summary · about
chapters (7)
- 0:00Introduction and demo
- 1:45OIDC workflow explained
- 3:36Azure AD configuration
- 6:46OpenStack integration
- 10:00OpenShift setup and demo
- 14:00Troubleshooting and success
- 17:53Advanced mapping and Q&A
related talks
54mWho's your user? OpenID from the ground-up
26mAzure Managed Identities: Why are you still using anything else?!?
34mWho Are You? I Really Want to Know… the Magic Behind OIDC
29mUnify Your OpenStack with Your Identity Provider
54mOpenID Connect In Depth
01h 02mDemystifying Azure AD, JWTs & OIDC
47mWho's your user? OpenID from the ground-up
57mOpenID Connect Architectural Patterns