diff --git a/doc/install-guide/section_keystone-openrc.xml b/doc/install-guide/section_keystone-openrc.xml
index 7c2b67cd99..a027e4b425 100644
--- a/doc/install-guide/section_keystone-openrc.xml
+++ b/doc/install-guide/section_keystone-openrc.xml
@@ -39,6 +39,10 @@ export OS_AUTH_URL=http://<replaceable>controller</replaceable>:5000/v2.0</progr
         for the <literal>demo</literal> user in the Identity service.</para>
     </step>
   </procedure>
+ <note><title>Identity ports</title>
+ <para>Note the two different ports used above. Port 35357 is used for
+ administrative functions only. Port 5000 is for normal user
+functions and is the most commonly used.</para></note>
   <procedure>
     <title>To load client environment scripts</title>
     <step>