Identity, Authentication, and Access Management in Openstack ― Implementing and Deploying Keystone

Get up to speed on the basic concepts and core building blocks of Keystone, the OpenStack project that provides identity, token, catalog, and policy services. This practical guide from contributors to both Keystone and OpenStack also provides pragmatic direction on how to deploy Keystone into the enterprise.

After an overview of fundamental basic concepts of Keystone, the identity and access management service for the OpenStack cloud-computing software platform, this book provides you with best practices and hands on instruction on how to integrate OpenStack Keystone into existing enterprise identity and federation infrastructures.

Steve Martinelli is an OpenStack Active Technical Contributor and a Keystone Core Contributor. He primarily focuses on enabling Keystone, which is OpenStack's Identity Manager, to better integrate into enterprise environments. Steve was responsible for adding Federated Identity and OAuth support to Keystone and was one of the leading contributors to Keystone to Keystone federation support for interoperable hybrid cloud enablement. In his spare time he also contributes to OpenStackClient, pyCADF, and oslo.policy and is a core contributor in each of these projects. Steve received his B.ASc. in Computer Engineering from York University.

Henry works in IBM's Cloud division as an OpenStack Architect and a core contributor to OpenStack Keystone, driving enterprise capabilities into OpenStack as well as IBM's products that use OpenStack. He has a long history of developing enterprise software, graphics and communication systems as well as nanotechnology, having founded numerous successful companies in Europe and the USA, finally coming to IBM via acquisition in 2009. He holds a 1st class honors degree in Electrical Engineering from the University of Southampton, UK.

Dr. Brad Topol is an IBM Distinguished Engineer in the IBM Cloud Architecture and Technology organization. In his current role, Brad leads a development team focused on contributing to and improving OpenStack and he has cross-IBM responsibility for coordinating its contributions to OpenStack. Brad is an OpenStack core contributor to Keystone-Specs, Pycadf, and Heat-Translator and has personally contributed to multiple OpenStack projects including Keystone, Pycadf, Heat-Translator, and DevStack. He received a Ph.D. in Computer Science from the Georgia Institute of Technology in 1998.