I added keystone as affected projects. Horizon team now has nobody who is familiar with federated identity and no bug like this can be resolved without keystone team support.
** Also affects: keystone Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1828783 Title: More user-friendly websso unauthorized Status in OpenStack Dashboard (Horizon): New Status in OpenStack Identity (keystone): New Bug description: Whenever trying to login with horizon with federated identity, if the user is correctly authenticated at the IdP but not authorized by Keystone (mapping failed), the user just gets a json error message: {"error": { "message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized" } } which is not very user-friendly. Would it be possible to catch this error by Horizon/Keystone so user gets a nicer error message? To manage notifications about this bug go to: https://bugs.launchpad.net/horizon/+bug/1828783/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp