Administrator Guides¶
OpenStack Identity, code-named keystone, is the default Identity
management system for OpenStack. After you install Identity, you
configure it through the /etc/keystone/keystone.conf
configuration file and, possibly, a separate logging configuration
file. You initialize data into Identity by using the keystone
command-line client.
- Identity concepts
- Bootstrapping Identity
- Manage projects, users, and roles
- Create and manage services and service users
- Certificates for PKI
- Domain-specific configuration
- URL safe naming of projects and domains
- Case-Insensitivity in keystone
- External authentication with Identity
- Integrate Identity with LDAP
- Upgrading Keystone
- Keystone tokens
- Configure Identity service for token binding
- Fernet - Frequently Asked Questions
- Use trusts
- Caching layer
- Security compliance and PCI-DSS
- Performance and scaling
- Example usage and Identity features
- Authentication middleware with user name and password
- Identity API protection with role-based access control (RBAC)
- Troubleshoot the Identity service
- Unified Limits
- Token provider
- Federated Identity
- Credential Encryption
- Endpoint Filtering
- Health Check middleware
- OAuth1 1.0a
Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.