Before diving into relooking the identity service in OpenStack, let's get to grips with the basic concepts of Keystone in a nutshell:
- Project: In the OpenStack's early releases, the project concept was referred to as a tenant. A project in OpenStack is a container of a number of resources for specific users or groups that abstracts their isolation.
- Domain: Another abstraction layer added to the identity service, a domain assembles projects, users, and groups in an OpenStack environment. The new domain structure enables the definition of organizational cloud setup by isolating projects and groups for each organization.
- Role: A user in OpenStack can be a member of one or many projects. This can be achieved by defining a new role that can be assigned to the project(s) and the OpenStack user. In this way, roles in OpenStack determine the user...
