Description of identity configuration options

Configuration option = Default value	Description
[identity]
default_domain_id = default	(StrOpt) This references the domain to use for all Identity API v2 requests (which are not aware of domains). A domain with this ID will be created for you by keystone-manage db_sync in migration 008. The domain referenced by this ID cannot be deleted on the v3 API, to prevent accidentally breaking the v2 API. There is nothing special about this domain, other than the fact that it must exist to order to maintain support for your v2 clients.
domain_config_dir = /etc/keystone/domains	(StrOpt) Path for Keystone to locate the domain specific identity configuration files if domain_specific_drivers_enabled is set to true.
domain_specific_drivers_enabled = False	(BoolOpt) A subset (or all) of domains can have their own identity driver, each with their own partial configuration file in a domain configuration directory. Only values specific to the domain need to be placed in the domain specific configuration file. This feature is disabled by default; set to true to enable.
driver = keystone.identity.backends.sql.Identity	(StrOpt) Identity backend driver.
list_limit = None	(IntOpt) Maximum number of entities that will be returned in an identity collection.
max_password_length = 4096	(IntOpt) Maximum supported length for user passwords; decrease to improve performance.