There is some ongoing work to support SAML. There are a number of blueprints created and the initial server side implementation made it into Icehouse. client side will follow.

The notes from the Icehouse summit are at https://etherpad.openstack.org/p/iceh...

In current keystone code base, it might support the oauth tokens by the oauth plugin. just take a look at the code under this package keystone\contrib.

Hope that helps!

Vic