Keystone supports various methods of authentication beyond the standard local user and password method.
auth-totp federation/federated_identity external-authentication configure_tokenless_x509 oauth1