1. 3rd party apps authentication, SSO and authorization:
    1. Act as SAML 2.0 Identity Provider; Integrate via
      1. mod_shib (Apache HTTPd)
      2. nginx-http-shibboleth (Nginx)
      3. iis7_shib.dll (IIS)
    2. Act as OpenID Connect 1.0 Provider, gain certification; integrate via
      1. mod_auth_openidc (Apache HTTPd)
      2. nginx-openid-connect (Nginx)
      3. Microsoft.AspNetCore.Authentication.OpenIdConnect .Net package (IIS)
    3. Implement the latest version available of the CAS protocol; integrate via the various CAS clients available:
      1. Apache HTTPd
      2. Nginx
      3. Java
      4. .NET
      5. PHP
      6. Perl
      7. Python
      8. Ruby
  2. Authorization
    1. Access Policies
      1. URL-based
      2. grant-based (for JWT)
    2. Implement XACML 3.0
    3. Implement UMA

References

Projects and products

  • OpenSSO / OpenAM
  • CAS
  • Apache Fortress
  • Apache CXF Fediz
  • Keycloack

Topics

  • Enterprise Single SignOn
  • API gateway
  • mobile
  • Physical Access Management / IoT
  • eIDAS


  • No labels