keystone.openstack.orgKeystone, the OpenStack Identity Service — keystone 25.0.1.dev13 documentation

Toggle navigation Search Software Overview OpenStack Components SDKs Deployment Tools OpenStack Map Sample Configs Use Cases Users in Production Ironic Bare Metal Edge Computing Telecom & NFV Science and HPC Containers Enterprise User Survey Events Open Infrastructure Summits Project Teams Gathering OpenDev Community Events OpenStack & OpenInfra Days Summit Videos Community Welcome! Start Here OpenStack Technical Committee Speakers Bureau OpenStack Wiki Get Certified (COA) Jobs Marketing Resources Community News Superuser Magazine OpenInfra Foundation Supporting Organizations Open Infrastructure Foundation (OpenInfra Foundation) Marketplace Training Distros & Appliances Public Clouds Hosted Private Clouds Remotely Managed Private Clouds Consulting & Integrators Drivers Blog Docs Join Sign up for Foundation Membership Sponsor the Foundation More about the Foundation Log In Keystone, the OpenStack Identity Service Keystone, the OpenStack Identity Service ¶ Keystone is an OpenStack service that provides API client authentication, service discovery, and distributed multi-tenant authorization by implementing OpenStack’s Identity API . This documentation is useful for contributors looking to get involved in our community, developers writing applications on top of OpenStack, and operators administering their own OpenStack deployments. This documentation is generated by the Sphinx toolkit and lives in the source tree . Also see the Getting Involved page for other ways to interact with the community. Related Projects ¶ In addition to creating OpenStack’s Identity Service, the Keystone team also provides a WSGI middleware , an Authentication library and a Python client library . Installation Guides ¶ Keystone Installation Tutorial Keystone Installation Tutorial for openSUSE and SUSE Linux Enterprise Keystone Installation Tutorial for Red Hat Enterprise Linux and CentOS Keystone Installation Tutorial for Ubuntu General Information ¶ This section contains general information related to keystone which is relevant to developers, users and operators. For documentation specific to any of these three, please see the subsequent sections. Getting Started Keystone Architecture Mapping of policy target to API Getting Involved Code Documentation keystone Indices and tables Contributor Documentation ¶ This section contains the documentation needed for developing keystone. Contributor Documentation So You Want to Contribute… How Can I Help? Setting up Keystone Identity API v2.0 and v3 History Proposing Features Working with Release Notes Testing Keystone Developing doctor checks Making an API Change Authentication Plugins Database Migrations Identity entity ID management for domain-specific backends Learning Architecture Internals Keystone for Other Services Developing Keystone Drivers Service Catalog Overview Technical Vision for Keystone Programming Exercises for Interns and New Contributors User Documentation ¶ This section contains the documentation for end-users of keystone. User Documentation Supported clients Application Credentials Trusts API Discovery with JSON Home API Examples using Curl Multi-Factor Authentication CLI Documentation ¶ This section details information related to keystone management commands. CLI Documentation keystone-manage keystone-status Administrator Guides ¶ Administrator Guides Getting Started Identity concepts Configuring Keystone Bootstrapping Identity Manage projects, users, and roles Create and manage services and service users Keystone Configuration Troubleshoot the Identity service Logging Domain-specific configuration Integrate Identity with LDAP Caching layer Security compliance and PCI-DSS Performance and scaling URL safe naming of projects and domains Limiting list return size Endpoint Filtering Endpoint Policy Keystone Operations Upgrading Keystone Case-Insensitivity in keystone Managing trusts All about keystone tokens Keystone tokens Fernet - Frequently Asked Questions JWS key rotation Token provider Default Roles Primer Roles Definitions System Personas Domain Personas Project Personas Writing Policies Advanced Keystone Features Unified Limits Resource Options Credential Encryption Health Check Keystone Event Notifications Authentication Mechanisms Multi-Factor Authentication Time-based One-time Password (TOTP) Federated Identity Using external authentication with Keystone Configuring Keystone for Tokenless Authorization OAuth1 1.0a OAuth2.0 Client Credentials Grant Flow Overview Guide Configure HTTPS in Identity Service Configuration Options ¶ Keystone Configuration Options API Configuration options Policy configuration Sample configuration files this page last updated: 2019-07-22 18:43:51 Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License . See all OpenStack Legal Documents . found an error? report a bug OpenStack Documentation Guides Install Guides User Guides Configuration Guides Operations and Administration Guides API Guides Contributor Guides Languages Deutsch (German) Français (French) Bahasa Indonesia (Indonesian) Italiano (Italian) 日本語 (Japanese) 한국어 (Korean) Português (Portuguese) Türkçe (Türkiye) 简体中文 (Simplified Chinese) keystone 25.0.1.dev13 Keystone Installation Tutorial Getting Started Code Documentation Indices and tables Contributor Documentation User Documentation CLI Documentation Administrator Guides Keystone Configuration Options Page Contents Keystone, the OpenStack Identity Service Related Projects Installation Guides General Information Contributor Documentation User Documentation CLI Documentation Administrator Guides Configuration Options OpenStack Projects OpenStack Security Blog News Community User Groups Events Jobs Companies Contribute Documentation OpenStack Manuals Getting Started API Documentation Wiki Branding & Legal Legal Docs Logos & Guidelines Trademark Policy Privacy Policy OpenInfra CLA Stay In Touch The OpenStack project is provided under the Apache 2.0 license . Docs.openstack.org is powered by Rackspace Cloud Computing...