Hi Jeremy- >From what I understand, ksm is set up so that it registers the conf opts for the [keystone_authtoken] section implicitly when you import keystonemiddleware.auth_token, which imports _opts [1], which defines and registers the options [2]. I'm not an expert, but I believe you(r code) should be relying on the above exclusively, and not trying to find/register these options in any other way. Assuming that's already happening, then as others suggested, it may be a matter of import ordering. HTH, efried [1] https://opendev.org/openstack/keystonemiddleware/src/branch/stable/queens/keystonemiddleware/auth_token/__init__.py#L240 [2] https://opendev.org/openstack/keystonemiddleware/src/branch/stable/queens/keystonemiddleware/auth_token/_opts.py#L219-L220