diff --git a/nova/api/auth.py b/nova/api/auth.py
index 3fb826e7b1bb..0671b2bb55d5 100644
--- a/nova/api/auth.py
+++ b/nova/api/auth.py
@@ -36,6 +36,7 @@ auth_opts = [
                      'is removed from v2.1 api.'),
     cfg.StrOpt('auth_strategy',
                default='keystone',
+               choices=('keystone', 'noauth2'),
                help='''
 The strategy to use for auth: keystone or noauth2. noauth2 is designed for
 testing only, as it does no actual credential checking. noauth2 provides