diff --git a/manifests/identity.pp b/manifests/identity.pp
index 7a011046..e8937859 100644
--- a/manifests/identity.pp
+++ b/manifests/identity.pp
@@ -397,7 +397,8 @@ class cloud::identity (
   $debug                        = $os_params::debug,
   $log_facility                 = $os_params::log_facility,
   $use_syslog                   = $os_params::use_syslog,
-  $ks_token_expiration          = $os_params::ks_token_expiration
+  $ks_token_expiration          = $os_params::ks_token_expiration,
+  $ks_token_driver              = 'keystone.token.backends.memcache.Token'
 ){
 
   # Disable twice logging if syslog is enabled
@@ -420,7 +421,7 @@ class cloud::identity (
     log_facility     => $log_facility,
     memcache_servers => $memcache_servers,
     sql_connection   => "mysql://${encoded_user}:${encoded_password}@${keystone_db_host}/keystone",
-    token_driver     => 'keystone.token.backends.memcache.Token',
+    token_driver     => $ks_token_driver,
     token_provider   => 'keystone.token.providers.uuid.Provider',
     use_syslog       => $use_syslog,
     verbose          => $verbose,
diff --git a/spec/classes/cloud_identity_spec.rb b/spec/classes/cloud_identity_spec.rb
index 8868788f..bdd8d05d 100644
--- a/spec/classes/cloud_identity_spec.rb
+++ b/spec/classes/cloud_identity_spec.rb
@@ -90,7 +90,8 @@ describe 'cloud::identity' do
         :log_facility                 => 'LOG_LOCAL0',
         :use_syslog                   => true,
         :ks_token_expiration          => '3600',
-        :api_eth                      => '10.0.0.1' }
+        :api_eth                      => '10.0.0.1',
+        :ks_token_driver              => 'keystone.token.backends.memcache.Token' }
     end
 
     it 'configure keystone server' do