Gluu Server – Authentication & Authorization for Web and Mobile Applications

What Is Gluu?Gluu Features Gluu Versions Federations Janssen Services

What is Gluu Server?

Gluu Server is an open source software for Access Management by the US developer Gluu. With Gluu Server, they offer an open source platform to help companies monitor access to their own resources, and those within a partner network. As the software is based on the protocols SAML, OpenID Connect, and OAuth2, almost any given application can be connected. TTherefore, Gluu Server is a flexible access management software that can increase data security and reduce costs in the long run. Single sign-on for all applications significantly improves the user experience – even beyond the limitations of the aforementioned protocols.

Gluu Structure (clockwise): Casa, Database, Shibboleth SAML IdP, Passport.js, Admin UI; center: OpenID Provider

Features

Gluu Server offers a wide range of features:

Single Sign-On (SSO): Gluu Server provides secure single sign-on via OpenID Connect, OAuth2, SAML and CAS for both Web and mobile applications.
Two-Factor Authentication: The software supports a large number of 2FA mechanisms to increase the security for sensitive applications. In combination with the already integrated Casa one can setup a self-service portal, manage tokes, and more. However, it is also possible to connect external 2FA solutions. Additionally, Gluu Server comes with an authentication flow to very easily connect privacyIDEA.
Social-Login and external authentication: users can register and login via Google, Facebook, GitHub, etc. This solution is very versatile and can even be used for external authentical via enterprise SSO, such as ADFS.
Access management: with Gluu Server, access to various resources can be centrally managed.
Identity management APIs: Gluu Server uses standard compliant SCIMv2 APIs for provisioning and deprovisioning of users. Thus, Gluu Server can be seamlessly connected to identity management systems. Alternatively, users can also be conveniently managed directly in Gluu via an administration interface.
Directory integration: it is possible to connect an existing Active Directory or a LDAP directory service with Gluu.

The functionality of Gluu Server can also be extended with additional optional Gluu applications:

Super Gluu : is a mobile app by Gluu for two-factor authentication, here the second factor is sent to a mobile device as push notification.
Casa: is the 2FA management and self-service portal by Gluu. Here, users can setup and maintain their own second factor, can link accounts, and edit their own data.
Gateway: is a collection of several plugins, which enable individualised access management policy enforcement. Among other things, this makes it possible for API endpoints to be protected with OAuth2/OIDC even though the applications behind the endpoints themselves do not support the protocol. Technically, Gluu acts as a reverse proxy in this case.

Gluu Versions

Gluu offers their software in different versions, which come with different functions and hence, address different use cases.

Gluu Enterprise: Gluu Enterprise comes with a very modern admin interface and is only available as a subscription.
Gluu Cloud : The cloud version of Gluu itself is available in three different versions. Again, the suitable option depends on the requirements (e.g. whether external authentication or SAML support is necessary), and the desired scalability.

We are happy to do a requirement analysis with you in order to determine which Gluu version is the most suitable for you.

Federations with Gluu

Gluu Server can also be used in the context of federations. The typical application case is the SAML2 protocol. This is especially useful if users also need access to services and applications across organisations. Federated Identity & Access Management eliminates the need for multiple SSO agreements. Instead, single sign-on works cross-organisational.

Das Janssen Projekt

To ensure that Gluu remains open source in the future, the company decided in 2020 to publish central functions with an open patent under the name “Janssen” via the Linux Foundation.

Janssen is an application for authentication and authorisation with OIDC and OAuth2, on which Gluu Server is built. Janssen is thus a further development of the previous component oxAuth in Gluu and will replace it in the future.

Janssen already offers many of the core functions out-of-the-box, such as the OIDC/OAuth2 authentication server, the connection to user management, support for 2FA and configurability via a command line interface.

Components

auth-Server
fido
config-api
scim
jans-cli
eleven
client-api
setup
core
orm
docker

[More Information on Janssen]

What Gluu Services Does DAASI International Offer?

As an official OEM partner, DAASI International offers the following services for Gluu:

Consulting: DAASI International happily advises you on how to integrate Gluu into your IT infrastructure.
Implementation: DAASI International takes care of the implementation and integration of Gluu, and programs plugins for you, if required, in order to also meet even highly specialised requirements.
Support/Managed Service: DAASI International can support you with the productive operation by monitoring, reporting, consulting, maintenance and the implementation of updates. This can either be done for installations on your servers, or DAASI International hosts the service for you as a SaaS solution in a German data processing centre.

You have a question concerning Gluu Server?

DAASI International gladly answers all of your questions.

Gluu Server – Authentication & Authorization for Web and Mobile Applications

What is Gluu Server?

Features

Gluu Versions

Federations with Gluu

Das Janssen Projekt

Components

What Gluu Services Does DAASI International Offer?

You have a question concerning Gluu Server?

IDENTITY & ACCESS MANAGEMENT

DIGITAL HUMANITIES

COMPANY

CAREER