# keystone.federation.core module

Main entry point into the Federation service.

class keystone.federation.core.Manager

  Bases: `Manager`

  Default pivot point for the Federation backend.

  See `keystone.common.manager.Manager` for more details on how this dynamically calls the backend.

  create_idp(idp_id, idp)
  create_protocol(idp_id, protocol_id, protocol)
  create_sp(sp_id, service_provider)
  delete_idp(idp_id)
  delete_protocol(idp_id, protocol_id)
  delete_sp(sp_id)
  driver_namespace: str = 'keystone.federation'
  evaluate(idp_id, protocol_id, assertion_data)
  get_enabled_service_providers()

    List enabled service providers for Service Catalog.

    Service Provider in a catalog contains three attributes: `id`, `auth_url`, `sp_url`, where:

    - id is a unique, user defined identifier for service provider object

    - auth_url is an authentication URL of remote Keystone

    - sp_url a URL accessible at the remote service provider where SAML assertion is transmitted.

    Returns:

      list of dictionaries with enabled service providers

    Return type:

      list of dicts

  update_protocol(idp_id, protocol_id, protocol)
  update_sp(sp_id, service_provider)

this page last updated: 2026-08-17 12:45:24

Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.

found an error? report a bug