Keystone doesn't allow a token to be scoped to multiple tenants

Can you clarify which XSD you are referring to and maybe post an example call you expect to be able to make (or response you expect to get).

Note: the API and Keystone are two different things. The spec allows for scoping to multiple tenants (and Rackspace's implementation does that), but Keystone does not support multiple tenants in one token.

I think that's the issue - the API shows that multiple tenants can be scoped in a token as shown in token.xsd:
        <sequence>
            <element name="tenant" type="identity:TenantForAuthenticateResponse"/>
            <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded" />
        </sequence>

But Keystone only allows one tenant for the token.

FYI - this is the issue that Paul Q brought up

[Expired for Keystone because there has been no activity for 60 days.]