{"categories":[{"label":"WWW/HTTP","url":"https://skillfed.io/packages/category/internet-www-http/6"}],"enrichment":{"capability":"OpenStack Keystone provides authentication, authorization, and service discovery for OpenStack cloud infrastructure via HTTP, typically deployed as an interface to existing identity systems like LDAP.","skillfed_tags":["openstack-service","identity-management","cloud-infrastructure"],"use_cases":["Deploy as the identity service for an OpenStack cloud to authenticate users and issue tokens for API access.","Integrate with an existing LDAP directory to provide cloud-native authentication without duplicating user accounts.","Enable service-to-service authentication and discovery so OpenStack components (Nova, Glance, Cinder) can securely communicate.","Support federated identity via SAML2 or OAuth to allow users from external identity providers to access the cloud.","Manage role-based access control (RBAC) policies across OpenStack projects and services using oslo.policy."],"what_it_does":"Keystone is OpenStack's identity and access management service. It provides centralized authentication (verifying who users are), authorization (determining what they can do), and service discovery (helping other OpenStack services find each other) via HTTP APIs. It is designed to be deployed as a standalone service in an OpenStack cloud, not as a library embedded in other applications.\n\nThe package includes a Flask-based HTTP server, integrates with SQLAlchemy for persistence, uses cryptography and bcrypt for secure credential handling, and supports multiple authentication backends including LDAP, OAuth, and SAML2. It depends on the oslo.* family of libraries for configuration, logging, caching, and policy enforcement\u2014standard infrastructure components across OpenStack services. Deployment typically involves configuration files, a database, and integration with an identity provider.","worth_installing":"Yes, if you are deploying or operating an OpenStack cloud. Keystone is essential infrastructure for any OpenStack deployment. However, this is not a library for general application use\u2014it is a service component. Be aware of 5 known vulnerabilities in the security database; verify that version 29.0.2 includes patches or plan mitigations. Requires Python 3.10+, substantial operational setup (database, messaging, identity backend), and integration with other OpenStack services."},"id":"keystone","links":{"html":"https://skillfed.io/packages/keystone","md":"https://skillfed.io/packages/keystone.md","pypi":"https://pypi.org/project/keystone/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-07-02","license_spdx":null,"license_treatment":"permissive","name":"keystone","python_support":"supports_current","summary":"OpenStack Identity"},"popularity":{"monthly_downloads":135331,"position":11439,"tier":"top_15000"},"security":{"n_vulnerabilities":5},"version":"29.0.2"}