keystone class for identity management