openstack-keystone

The OpenStack Keystone service offers features like allowing API clients to discover and navigate to cloud services, central directory of users mapped to the OpenStack services they can access, common authentication system across the cloud operating system, integration with existing backend directory services like LDAP, support for multiple forms of authentication including standard username and password credentials, token-based systems and AWS-style (i.e. Amazon Web Services) logins, queryable list of all of the services deployed in an OpenStack cloud in a single registry, supports token-based authN, proxying external services and AuthN/AuthZ mechanisms. Users and third-party tools can programmatically determine which resources they can access.