WSO2 Identity Server

The WSO2 Identity Server is an open source identity and entitlement management server. It supports Information Cards and OpenID for authentication as well as XACML for fine grained authorization. Providing a complete enterprise ready identity solution, it integrates easily into existing user stores such as LDAP or Active Directory and supports multi-factor authentication and much more. The WSO2 Identity Server helps you build secured SOA in a few very easy steps.

As SOA adoption grows in an enterprise, SOA resources such as processes and policies must be securely managed. WSO2 Identity Server is ideally positioned to answer growing challenges of identity and security management of enterprise web applications. It enables enterprise architects and developers to improve customer experience by guaranteeing secure online interactions within and outside of an SOA.

WSO2 Identity Server

• In Action
• Features
• Architecture

Fine grained authorization

Policy based authorization for services.

OpenID Provider

OpenID issuer having support for multi-factor authentication with XMPP and Information cards.

Information Card Provider

Information Cards provider having support for Managed Information cards backed by user name password and self-issued information cards.

• In Action
• Features
• Architecture

Entitlement Engine

• User entitlement support with XACML 2.0

Ability to revoke information cards

• Provides the ability to revoke issued information cards and block those from being used to authenticate.

Support for custom claim dialects and claims

• Provides the flexibility to define custom claims using the identity provider management console and map those claims to user attributes.

• In Action
• Features
• Architecture

WSO2 Identity Server extends the popular Apache Web Services Projects such as Apache Rampart, Apache WSS4J and Apache XMLSecuity as well as WSO2 Crabon. It is released under the Apache License v2.0. The user manager component of the Identity Server decouples user attribute handling from the upper layers which further facilitates claim based access to the underlying user store.