OpenStack

  1. Identity Service: Keystone
    1. Core Functionality
      1. Authentication
        1. User Authentication Process
          1. Token Generation
          2. Authorization
            1. Role-Based Access Control
              1. Policy Enforcement
              2. Service Catalog
                1. Service Registration
                  1. Endpoint Discovery
                  2. Policy Management
                    1. Policy Files
                      1. Policy Enforcement Points
                    2. Key Concepts
                      1. Users
                        1. User Creation and Management
                        2. User Groups
                          1. Group Membership
                            1. Group-Based Role Assignment
                            2. Projects
                              1. Project Scoping
                              2. Domains
                                1. Domain Structure
                                  1. Domain Administration
                                  2. Roles
                                    1. Role Definition
                                      1. Custom Roles
                                      2. Tokens
                                        1. Token Types
                                          1. UUID Tokens
                                            1. Fernet Tokens
                                              1. JWS Tokens
                                              2. Token Expiry and Revocation
                                              3. Endpoints
                                                1. Endpoint Types
                                                  1. Public
                                                    1. Internal
                                                      1. Admin
                                                      2. Endpoint Management
                                                    2. Authentication Mechanisms
                                                      1. Password-based Authentication
                                                        1. Token-based Authentication
                                                          1. Federation with External Identity Providers
                                                            1. LDAP Integration
                                                              1. SAML Integration
                                                                1. OpenID Connect Integration
                                                                  1. Active Directory Integration
                                                                2. Keystone Architecture
                                                                  1. Keystone API
                                                                    1. API Endpoints
                                                                      1. Versioning
                                                                      2. Identity Backends
                                                                        1. SQL Backend
                                                                          1. LDAP Backend
                                                                          2. Token Backends
                                                                            1. Fernet Token Backend
                                                                              1. UUID Token Backend
                                                                              2. Catalog Backends
                                                                                1. SQL Catalog Backend
                                                                                2. Assignment Backends
                                                                                  1. Policy Backends