Keystone—OpenStacks Identity service—provides secure controlled access to a cloud resources. In OpenStack environments, Keystone performs many vital functions, such as authenticating users and determining what resources users are authorized to access. Whether the cloud is private, public, or dedicated, access to cloud resources and security is essential. This practical guide to using Keystone provides detailed, step-by-step guidance to creating a secure cloud environment at the Infrastructure-as-a-Service layer—as well as key practices for safeguarding your clouds ongoing security. Learn about Keystones fundamental capabilities for providing Identity, Authentication, and Access Management Perform basic Keystone operations, using concrete examples and the latest version (v3) of Keystones Identity API Understand Keystones unique support for multiple token formats, including how it has evolved over time Get an in-depth explanation of Keystones LDAP support and how to configure Keystone to integrate with LDAP Learn about one of Keystones most sought-after features—support for federated identity