Identity Management User Interface (IDMUI)

Project Domain / Category

Software Engineering/Infrastructure Management

Abstract/Summary

In OpenStack, Keystone is the identity service that provides authentication, authorization, and service discovery mechanisms for other OpenStack services. It plays a central role in managing users and their permissions, ensuring access to resources across the OpenStack environment is secure and controlled. Holistically, the key stack provides the following capabilities.

Keystone handles user and service authentication by verifying credentials (username/password, tokens, etc.) and issuing authentication tokens that can be used to access other OpenStack services. After authentication, Keystone manages authorization by defining roles and permissions. It determines what resources users and services are allowed to access based on predefined roles and access control policies. Keystone manages projects (also known as tenants) to isolate resources. Users belong to projects and can have different access levels within those projects. Keystone maintains a service catalog, which lists all available OpenStack services and their endpoints. This allows clients to discover which services are available in the environment. Keystone issues and manages authentication tokens that are used by other OpenStack services to verify identity and authorization without needing to re-authenticate the user on every request. It provides the ability to manage multiple domains, each with its own set of users, groups, and projects, supporting hierarchical multi-tenancy. Keystone handles the creation, management, and association of users, groups, and their roles. In this project, you will develop a web-based User interface for managing the identity service.

Functional Requirements:

you will first prepare a virtual machine using Oracle VirtualBox or VMWARE and install the latest Ubuntu Server Operating System and Keystone package and OpenStack API. You will develop a web application called IDMUI using any framework/language of your choice. The application must be able to perform the following tasks

1.      View the status of the Keystone Service running in the VM.

2.      Allow start/stop and change the configuration of the keystone service in a user-friendly way.

3.      Should provide a top-level menu named: Identity Service and provide the following options and submenu.

•      Service Management

•      Endpoint Management

•      User and Role Management

•      Project (Tenant) Management

•      Token Management

•      Domain Management

•      Group Management

•      Configuration management

4.      Create another top-level menu named Database Management

5.      Each menu should provide suitable options for configuration/view status/statics which are provided by the keystone service.

6.      The IDMUI will communicate with the Keystone server via open stack APIs.