Quantum API Auth (Keystone Integration)

Quantum API associates network with tenants.

The aim of this blueprint is to authenticate API requests in order to ensure they come from the correct tenant, and that the user that perform the request has the appropriate authorization level.

Features expected in Diablo release:
• Simplified authN/authZ model: only one “administrator” user per tenant.
• Authentication service
• Object ownership verification: ensure that all the resources involved are owned by the tenant submitting the request.

Features which will be NOT delivered for Diablo release:

• Full RBAC model
• Shared network model

For further details, please read the full specification wiki page (link below).