keystone/api-ref/source/v3/index.rst

1.6 KiB

tocdepth

2

Identity API v3 (CURRENT)

The Identity service generates authentication tokens that permit access to the OpenStack services REST APIs. Clients obtain this token and the URL endpoints for other service APIs by supplying their valid credentials to the authentication service.

Each time you make a REST API request to an OpenStack service, you supply your authentication token in the X-Auth-Token request header.

Like most OpenStack projects, OpenStack Identity protects its APIs by defining policy rules based on a role-based access control (RBAC) approach.

The Identity service configuration file sets the name and location of a JSON policy file that stores these rules.

For information about Identity API protection, see Identity API protection with role-based access control (RBAC) in the OpenStack Cloud Administrator Guide.

This page lists the Identity API operations in the following order:

  • Authentication and token management
  • Credentials
  • Domains
  • Domain configuration
  • Groups
  • Policies
  • Projects
  • Regions
  • Roles
  • Service catalog and endpoints
  • Users
  • OS-INHERIT API