3 Ways Banks Secure their Open Banking APIs with Gluu
Open Banking initiatives enable third parties to process financial transactions for consumers, creating new competitive offerings. Open banking is not only a cost to banks but a new revenue…
Blog
Gluu blog
Articles from the Gluu team on identity, authorization, federation and running open source in production.
Gluu 4 supports Apple platform FIDO 2 like TouchID
The first laptop to build in FIDO was the Google Pixelbook (RIP). It was a little geeky–you enabled a hidden ChromeOS feature to activate FIDO U2F via the laptop power button. But Apple has taken…
Strong Protection in the Era of Rising Threats
Today’s cyberspace and IT systems have transformed from a uniformed homogeneous structure brought on by a fixed workspace and data center system to a heterogeneous network consisting of innovative…
Provision Users for AWS with Gluu
This article will guide you through how to use SCIM to provision users on a Gluu 4 instance and configure Single-Sign-On (SSO) with Amazon Web Services. To begin, ensure the Shibboleth IDP and SCIM…
SP initiated SAML flow for Gluu Solo
This article will guide you through the process of a Service Provider (SP) initiated SAML flow for single sign-on (SSO) using Gluu as the Identity Provider (IDP). We will be using a locally run Flask…
Integrating Gluu Server with tru.ID
It’s a modern axiom that passwords are bad. But there are still many deployment challenges for organizations to rollout two-factor authentication, such as requiring end users to purchase hardware or…
Gluu Advisory: Okta Twilio Cyberattack
Gluu would like to provide this bulletin to advise our community about the recent attacks on Twilio the suggested OTP SMS service configured through oxAuth and Casa. Affects all Gluu 3.X and 4.X…
Install RHEL 8 with the DISA STIG Security Profile
A Secure Technical Implementation Guide (“STIG”) is a document published by the Department of Defense Cyber Exchange (DoD), which is sponsored by the Defense Information Systems Agency (DISA). It…
Gluu 4.4.1 Updates
Updates for stability, the introduction of an allowlist and blocklist for redirect_uris (which enhances security if this optional parameter is used) and more secure email handling for MFA (and other…
Gluu Cloud is in Flight
Love the freedom of open source digital identity, but don’t want the deployment hassle? Gluu Solo might be for you. With Gluu Solo, you get all the components of Gluu 4. And the best part is, you…
Is SSI needed for Web3?
The illustration below, trying to explain Web 3 identity, is from an article published on Medium about efforts to develop a new European digital wallet. Interestingly, it makes a connection between…
Decentralized ID Part 3: Credential and DID Methods
In part one of this blog series, we outlined some of the trust challenges facing the implementation of decentralized identity. In part two, we covered some of the questions about digital wallets. In…