Single sign on 环境中缺少实体ID-Keystone SP

Single sign on 环境中缺少实体ID-Keystone SP,single-sign-on,openstack,federated-identity,keystone,Single Sign On,Openstack,Federated Identity,Keystone,当我将Keystone配置为Service Provider+horizon时,在尝试登录我的IdP SimpleSamlPHP后,我在/var/log/Keystone/Keystone-wsgi-public.log中收到此错误: 2017-03-15 01:32:26.240 29046 INFO keystone.common.wsgi [req-022ef0af-1811-4038-9aad-bd9a3e9443ac - - - - -] GET http://10.7.49.47:5

当我将Keystone配置为Service Provider+horizon时,在尝试登录我的IdP SimpleSamlPHP后,我在/var/log/Keystone/Keystone-wsgi-public.log中收到此错误:

2017-03-15 01:32:26.240 29046 INFO keystone.common.wsgi [req-022ef0af-1811-4038-9aad-bd9a3e9443ac - - - - -] GET http://10.7.49.47:5000/v3/auth/OS-FEDERATION/identity_providers/myidp/protocols/mapped/websso?origin=http://10.7.49.47/horizon/auth/websso/
2017-03-15 01:32:26.241 29046 ERROR keystone.federation.controllers [req-022ef0af-1811-4038-9aad-bd9a3e9443ac - - - - -] http://10.7.49.47/horizon/auth/websso/ is not a trusted dashboard host
2017-03-15 01:32:26.242 29046 WARNING keystone.common.wsgi [req-022ef0af-1811-4038-9aad-bd9a3e9443ac - - - - -] Authorization failed. The request you have made requires authentication. from 10.7.49.11
在我的浏览器中,我收到:{“error”:{“message”:“您提出的请求需要身份验证”,“code”:401,“title”:“Unauthorized”}

编辑:我激活了调试,并得到以下日志:

2017-03-15 12:29:58.960 5933 DEBUG keystone.federation.utils [req-e9875dd7-221b-463f-b2c1-ea184680fef3 - - - - -] Cannot find "remote_id_attribute" in configuration group mapped. Trying default location in group federation. get_remote_id_parameter /usr/local/lib/python2.7/dist-packages/keystone/federation/utils.py:296

我停止了uwsgi,然后重新启动