Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Apache CXF Fediz is a subproject of CXF. Fediz helps you to secure your web applications and delegates security enforcement to the underlying application server. With Fediz, authentication is externalized from your web application to an identity provider installed as a dedicated server component. The supported standard is WS-Federation Passive Requestor Profile. Fediz supports Claims Based Access Control beyond Role Based Access Control (RBAC).

News

*November 9, 2013 - Apache CXF Fediz 1.1.0 released!

Apache CXF Fediz 1.1.0 .3 has been released. For more information, please go here.

...

The following features are supported by the Fediz plugin 1.01

  • WS-Federation 1.0/1.1/1.2
  • SAML 1.1/2.0 Tokens
  • Support for encrypted SAML Tokens Release 1.1
  • Support for Holder-Of-Key SubjectConfirmationMethod 1.1
  • Custom token supportSupport
  • Publish WS-Federation Metadata document
  • Role information encoded as AttributeStatement in SAML 1.1/2.0 tokens
  • Claims information provided by FederationPrincipal interface

The following features are planned for the next release:

  • Interface
  • Support for Tomcat, Jetty, Websphere, Spring Security and JBoss CXF plugin
  • Support for encrypted SAML tokens
  • Support for Holder-Of-Key SubjectConfirmationMethod
  • 1.1
  • Fediz IDP supports "Resource IDP" support for Fediz IDProle as well 1.1

The following features are planned for the next release:

  • support for other protocols like SAML-P, OAuth

...

The following lists shows the supported containers and the location of the installation and configuration page.

Samples

The examples directory contains two sample relying party applications. They are independent of each other, so it is not necessary to deploy both at once.

...