API Operations for Client Developers

Some of these operations require only the core authentication service API v2.0 and some require extensions to the API. If an extension is required, it is included in The Rackspace implementation of the Keystone Identity Service; issuing the calls as described here uses the API extensions as needed.

MethodURIDescription
API Contract Version
GET/

Lists information about all Identity API versions.

GET/v2.0

Shows details for the Identity API v2.0.

Extensions
GET/v2.0/extensions

Lists available extensions.

GET/v2.0/extensions/{alias}

Gets detailed information for a specified extension.

Users
GET/v2.0/users

List users.

GET/users​{?name}

Get detailed account information for a specified user, by user name.

GET/users​{?id}

Get detailed account information for a specific user, by userid.

GET/users​{?email}

Get detailed information about a specific user, by user email.

POST/v2.0/users

Add a user.

POST/v2.0/users/{userId}

Update a user.

DELETE/v2.0/users/{userId}

Delete a user.

GET/v2.0/users/{userId}/OS-KSADM/credentials

List credentials, other than passwords, for all authentication methods.

GET/v2.0/users/{userId}/OS-KSADM/credentials/RAX-KSKEY:apiKeyCredentials

Get user credentials.

POST/v2.0/users/{userId}/OS-KSADM/credentials/RAX-KSKEY:apiKeyCredentials/RAX-AUTH/reset

Reset a user's API Key

Roles
GET/v2.0/OS-KSADM/roles​{?serviceId,​marker,​limit}

List roles.

GET/v2.0/OS-KSADM/roles/{roleId}

Get a role.

PUT/v2.0/users/{userId}/roles/OS-KSADM/{roleId}

Add a specific multiproduct or custom (product-specific) role to a user.

DELETE/v2.0/users/{userId}/roles/OS-KSADM/{roleId}

Delete a multiproduct or custom (product-specific) role from a user.

GET/users/roles

Return global roles for a specific user.

Authentication tokens
POST/v2.0/tokens

Authenticates using either a password or API key and generates an authentication token.

POST/v2.0/tokens

Allows Administrator users to authenticate by using a tenant id or name and a valid token.

DELETE/v2.0/{tokenId}

Revoke token.

Tenants
GET/tenants

Get a list of tenants.