Bringing Browser-Based MFA SSO to the OpenStack CLI
Learn how a lightweight keystoneauth1 plugin brings your existing browser-based MFA and SSO to the OpenStack CLI, with no changes to any client tools.
OpenStack
Identity
Secure authentication and access control with LDAP, SAML, and OpenID Connect integration for centralized identity management.
Secure Authentication
Reliable Identity Service for Secure Access
Our Identity Service provides secure authentication and access control, integrating with LDAP, SAML, and OpenID Connect for Hosted and On-Premise editions.
- Secure Authentication
Ensure secure user authentication, providing a reliable foundation for access control in your cloud environment.
- Access Control
Manage user access effectively with robust access control features, enhancing the security of your cloud resources.
- Integration Capabilities
Seamlessly integrate with LDAP, SAML, and OpenID Connect, offering versatile identity management for your Hosted and On-Premise editions.
All Editions
Hosted
On-Premise
Hosted
On-Premise
Overview
Authenticate Cloud Services and Existing Applications
Take advantage of Keystone’s vendor-agnostic authentication capabilities for all your cloud services as well as your existing applications.
One Credential For All
With Keystone’s advanced one-step authentication process, you can forget about logging yourself into each service and application.Vendor Agnostic
Regardless of its OpenStack origins, Keystone will work with any of your existing applications, ensuring that vendor-related limitations are a thing of the past.
Features
LDAP and SSO Integration
Keystone’s integration possibilities include manually connecting LDAP and SSO.
LDAP Compatible
Users can manually integrate their existing LDAP directory with Keystone to fully reap their authentication security benefits.SSO Integration
Keystone also makes it possible for users to make the most of their SSO and further streamline the single-step authentication process through a manual integration.
Integration
Enhanced Security
Minimize the risk of user credential exposure with Keystone’s application credentials.
Easily Authenticate Applications
By creating application credentials, users enable their applications to authenticate to Keystone, meaning they can also delegate a portion of their role assignments.Secrets Stay Secret
As opposed to each user’s credentials kept within the system config files, Keystone employs application credentials which only use the ID and a secret string.
We ❤️ Open Source
🎊Atmosphere is an open source project built by us.
Atmosphere stands out as a fully certified and conformant open-source platform. With both OpenStack powered certification and certified Kubernetes, it has passed all conformance tests. This guarantees a robust, high-performance, and reliable solution for your cloud needs.
Enterprise OpenStack Solutions
Build and operate production-grade private and public clouds with OpenStack. Our certified engineers provide end-to-end professional services from architecture design to ongoing operations.
What you'll get
- Deploy on-premises with full managed operations or support-only for your team — or fully hosted in our datacenters
- Run VMs, Kubernetes, bare metal, and containers on a unified platform — with Terraform, Ansible, and native API automation
- Continuous updates and zero-downtime upgrades to the latest OpenStack releases — managed entirely by our operations team
- Enterprise security with Keycloak, LDAP, SAML, and OpenID Connect — plus integrated Ceph or Pure Storage options
- Professional services for architecture design, deployment, upgrades, and Day 2 operations — tailored to your needs
- 24/7 expert support from certified OpenStack engineers who understand your infrastructure inside and out
Emergency Support
Experiencing a critical incident? Indicate the urgency in your message for immediate 24x7 emergency support from our expert team.
Contact Our Team
Let us help you with your OpenStack needs
Blog
The Latest From Us
Insights, updates, and stories from our team
The Real Cost of Running AI on Hyperscalers vs. Open Infrastructure
Hyperscaler AI looks fast but hides long-term lock-in and rising costs. See how OpenStack and Kubernetes deliver GPU infrastructure you actually control.
Why GPUs Sit Idle: The Hidden Efficiency Problem in AI Infrastructure
Many AI clusters run at only 30–50% GPU utilization. Learn why GPUs sit idle and how Kubernetes, scheduling, and better infrastructure design can improve AI infrastructure efficiency.