Identity

Keystone manages users, groups, projects, domains, roles, and application credentials across the cloud. Federation maps corporate IdP attributes to cloud roles for single sign-on. Service users authenticate automation separately from humans.