Keystone, the OpenStack Identity Service¶
Keystone is an OpenStack service that provides API client authentication, service discovery, and distributed multi-tenant authorization by implementing OpenStack’s Identity API.
This documentation is useful for contributors looking to get involved in our community, developers writing applications on top of OpenStack, and operators administering their own OpenStack deployments.
This documentation is generated by the Sphinx toolkit and lives in the source tree. Also see the Getting Involved page for other ways to interact with the community.
Installation Guides¶
General Information¶
This section contains general information related to keystone which is relevant to developers, users and operators. For documentation specific to any of these three, please see the subsequent sections.
Contributor Documentation¶
This section contains the documentation needed for developing keystone.
- Contributor Documentation
- Setting up Keystone
- Identity API v2.0 and v3 History
- Working with Release Notes
- Testing Keystone
- Developing
doctorchecks - Making an API Change
- Authentication Plugins
- Database Migrations
- Identity entity ID management between controllers and drivers
- Translated responses
- Learning Architecture Internals
- External Developers
Operator Documentation¶
This section contains the documentation for deploying and operating the keystone service.
User Documentation¶
This section contains the documentation for end-users of keystone.
CLI Documentation¶
This section details information related to keystone-manage.
Administrator Guides¶
- Administrator Guides
- Identity concepts
- Bootstrapping Identity
- Manage projects, users, and roles
- Create and manage services and service users
- Certificates for PKI
- Domain-specific configuration
- URL safe naming of projects and domains
- External authentication with Identity
- Integrate Identity with LDAP
- Upgrading Keystone
- Keystone tokens
- Configure Identity service for token binding
- Fernet - Frequently Asked Questions
- Use trusts
- Caching layer
- Security compliance and PCI-DSS
- Performance and scaling
- Example usage and Identity features
- Authentication middleware with user name and password
- Identity API protection with role-based access control (RBAC)
- Troubleshoot the Identity service
- Unified Limits
- Token provider
- Federated Identity
- Credential Encryption
Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.