Deploy Keystone
The OpenStack Identity service supports integration with existing LDAP directories for authentication and authorization services. OpenStack Identity only supports read-only LDAP integration. Integrating Active Directory (AD) with OpenStack Keystone is usually done via LDAP backend. Keystone doesn’t talk to AD “natively” — it treats AD as an LDAP directory.
Keystone → LDAP driver → Active Directory
Auth happens against AD, but Keystone still manages projects, roles, tokens.