https://hostingjournalist.com/rackspace-cern-openlab-federated-identity-in-openstack/