Gluu Server by Gluu is a free open source software (FOSS) platform for identity and access management (IAM). It supports web and mobile applications for user authentication, identity information, and policy decisions. Common use cases include single sign-on (SSO), mobile authentication, API access management, two-factor authentication (2FA), customer identity and access management (CIAM), and identity federation. Gluu Server supports open web standards for authentication, authorization, federated identity, and identity management, including OAuth 2.0, OpenID Connect, User Managed Access 2.0 (UMA), SAML 2.0, System for Cross-domain Identity Management (SCIM), FIDO Universal 2nd Factor (U2F), FIDO 2.0/WebAuthn, Lightweight Directory Access Protocol (LDAP), and Remote Authentication Dial-In User Service (RADIUS). It can be deployed on various Linux distributions such as Ubuntu, CentOS, RHEL, and Debian, as well as Docker and Kubernetes containers. All data used and generated by Gluu Server is stored in the local Gluu LDAP, which is a fork of OpenDJ. It supports synchronization with Active Directory or backend LDAP V3 servers using the Cache Refresh process. Identity and object data can be managed via the oxTrust admin interface or using an LDAP browser. Gluu Server also supports the SCIM protocol to push data from external identity data sources like identity management systems and cloud applications. It does not include features for delegated administration, role definition, approvals, and workflows, but it can consume information from identity management and governance systems in enterprise workflows. Gluu Server enables strong authentication to be enforced for many applications in one place and supports various authentication mechanisms and custom business logic for user sign-in. It also supports the UMA 2.0 profile of OAuth 2.0, providing a RESTful, JSON-based approach to protecting APIs and web resources.
