Add initial SAML federation setup

This adds an initial pass at a RDO setup that uses OS_FEDERATION
and Ipsilon to allow SAML to be used to obtain a Keystone token.
Ipsilon is backed by FreeIPA for an identity source.