All the files in this section can be found in the /etc/keystone directory.

The majority of the Identity service configuration is performed from the keystone.conf file.

The keystone-paste.ini file configures the Web Service Gateway Interface (WSGI) middleware pipeline for the Identity service.

A special logging configuration file can be specified in the keystone.conf configuration file (for example, /etc/keystone/logging.conf). For details, see the Python logging module documentation ( Python Logging).

The policy.json file defines additional access controls that apply to the Identity service.