Hi I have just published this first draft of a blue print where I try and pull together the discussions on external authn/z along with domain-specific backends, since they are, as we discussed at the summit, inter-related. Follow the link in the blue print for the full details. https://blueprints.launchpad.net/keystone/+spec/auth-domain-architecture Henry