While Keystone supports external authentication methods via Horizon the process is not simple (and in some cases possible) to do via the command line.  We would like to extend the CLI to support external authentication mechanisms easily.