# Authentication Mechanisms

Keystone supports various methods of authentication beyond the standard local user and password method.

- Multi-Factor Authentication
  - Configuring MFA
  - Using MFA
  - Supported multi-factor authentication methods
- Time-based One-time Password (TOTP)
  - Configuring TOTP
  - Authenticate with TOTP
- Federated Identity
  - Introduction to Keystone Federation
  - Configuring Keystone for Federation
  - Mapping Combinations
  - Dynamic project assignments
- Using external authentication with Keystone
  - Configuration
  - Using HTTPD authentication
- Configuring Keystone for Tokenless Authorization
  - Definitions
  - Keystone Configuration
  - Setup Mapping
  - SSL Terminator Configuration
  - Setup `auth_token` middleware
- OAuth1 1.0a

this page last updated: 2026-06-11 21:52:50

Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.

found an error? report a bug