Keystone, the OpenStack Identity Service

Keystone, the OpenStack Identity Service

Keystone is an OpenStack service that provides API client authentication, service discovery, and distributed multi-tenant authorization by implementing OpenStack’s Identity API.

This documentation is useful for contributors looking to get involved in our community, developers writing applications on top of OpenStack, and operators administering their own OpenStack deployments.

This documentation is generated by the Sphinx toolkit and lives in the source tree. Also see the Getting Involved page for other ways to interact with the community.

General Information

This section sontains the general information related to keystone which is commom to all the developers, users and operators. For documentation specific to the any of these three, please see the subsequent sections.

API Documentation

An end user can find the specific API documentation here, OpenStack’s Identity API.


Following are some API examples using curl. Note that these examples are not automatically generated. They can be outdated as things change and are subject to regular updates and changes.

Creative Commons Attribution 3.0 License

Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.