OpenStack

Identity

Secure authentication and access control with LDAP, SAML, and OpenID Connect integration for centralized identity management.

Secure Authentication

Reliable Identity Service for Secure Access

Our Identity Service provides secure authentication and access control, integrating with LDAP, SAML, and OpenID Connect for Hosted and On-Premise editions.

Secure Authentication: Ensure secure user authentication, providing a reliable foundation for access control in your cloud environment.
Access Control: Manage user access effectively with robust access control features, enhancing the security of your cloud resources.
Integration Capabilities: Seamlessly integrate with LDAP, SAML, and OpenID Connect, offering versatile identity management for your Hosted and On-Premise editions.

Overview

Authenticate Cloud Services and Existing Applications

Take advantage of Keystone’s vendor-agnostic authentication capabilities for all your cloud services as well as your existing applications.

One Credential For All
With Keystone’s advanced one-step authentication process, you can forget about logging yourself into each service and application.
Vendor Agnostic
Regardless of its OpenStack origins, Keystone will work with any of your existing applications, ensuring that vendor-related limitations are a thing of the past.

Features

LDAP and SSO Integration

Keystone’s integration possibilities include manually connecting LDAP and SSO.

LDAP Compatible
Users can manually integrate their existing LDAP directory with Keystone to fully reap their authentication security benefits.
SSO Integration
Keystone also makes it possible for users to make the most of their SSO and further streamline the single-step authentication process through a manual integration.

Integration

Enhanced Security

Minimize the risk of user credential exposure with Keystone’s application credentials.

Easily Authenticate Applications
By creating application credentials, users enable their applications to authenticate to Keystone, meaning they can also delegate a portion of their role assignments.
Secrets Stay Secret
As opposed to each user’s credentials kept within the system config files, Keystone employs application credentials which only use the ID and a secret string.

We ❤️ Open Source

🎊Atmosphere is an open source project built by us.

Star

Atmosphere stands out as a fully certified and conformant open-source platform. With both OpenStack powered certification and certified Kubernetes, it has passed all conformance tests. This guarantees a robust, high-performance, and reliable solution for your cloud needs.

Enterprise OpenStack Solutions

Build and operate production-grade private and public clouds with OpenStack. Our certified engineers provide end-to-end professional services from architecture design to ongoing operations.

What you'll get

Deploy on-premises with full managed operations or support-only for your team — or fully hosted in our datacenters
Run VMs, Kubernetes, bare metal, and containers on a unified platform — with Terraform, Ansible, and native API automation
Continuous updates and zero-downtime upgrades to the latest OpenStack releases — managed entirely by our operations team
Enterprise security with Keycloak, LDAP, SAML, and OpenID Connect — plus integrated Ceph or Pure Storage options
Professional services for architecture design, deployment, upgrades, and Day 2 operations — tailored to your needs
24/7 expert support from certified OpenStack engineers who understand your infrastructure inside and out

Emergency Support

Experiencing a critical incident? Indicate the urgency in your message for immediate 24x7 emergency support from our expert team.

Contact Our Team

Let us help you with your OpenStack needs

Field notes / Latest

What production is teaching us.

Engineering notes from operating open infrastructure: the failures, design decisions, and upstream work that make open infrastructure better.

Browse all field notes

OpenStackJuly 24, 2026

A Practical Guide to Data Sovereignty for Private Cloud Teams

Learn what data sovereignty means, how it differs from data residency, and the infrastructure decisions that support secure private clouds.

Read field note

OpenStackJuly 23, 2026

Cloud Repatriation: When Moving Workloads Back Makes Sense

Learn what cloud repatriation is, which workloads are good candidates, what to compare before moving, and how OpenStack supports a practical hybrid strategy.

Read field note

ZuulJuly 23, 2026

Ephemeral CI Runners: When Every Build Should Start Clean

Learn how ephemeral CI runners reduce cross-build contamination and security risk, where they add complexity, and when persistent runners still make sense.

Read field note

Identity

Reliable Identity Service for Secure Access

Authenticate Cloud Services and Existing Applications

One Credential For All

Vendor Agnostic

LDAP and SSO Integration

LDAP Compatible

SSO Integration

Enhanced Security

Easily Authenticate Applications

Secrets Stay Secret

We ❤️ Open Source