# OAuth1 1.0a

The OAuth 1.0a feature provides the ability for Identity users to delegate roles to third party consumers via the OAuth 1.0a specification.

To enable OAuth1:

1. Add the oauth1 driver to the `[oauth1]` section in `keystone.conf`. For example:

    [oauth1]
    driver = sql

2. Add the `oauth1` authentication method to the `[auth]` section in `keystone.conf`:

    [auth]
    methods = external,password,token,oauth1

3. If deploying under Apache httpd with `mod_wsgi`, set the WSGIPassAuthorization to allow the OAuth Authorization headers to pass through mod_wsgi. For example, add the following to the keystone virtual host file:

    WSGIPassAuthorization On

See API Specification for OAuth 1.0a for the details of API definition.

this page last updated: 2026-06-11 21:45:03

Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.

found an error? report a bug