Blog
Articles from the Gluu team on identity, authorization, federation and running open source in production.
We are often asked by prospects evaluating open source identity and access management platforms about the difference between the Gluu Server and Keycloak. Full disclosure, we have not deployed or…
Two-factor authentication (2FA) is hands-down the best way to increase online account security. It’s also true tighter security typically results in less convenience. Few things are more inconvenient…
Couchbase, the creator of the enterprise-class, multi-cloud NoSQL database, today announced at the Connect Conference that Gluu was acknowledged with the Couchbase Independent Software Vendor Partner…
The Gluu Server now supports CIBA. Improve the end-user experience during authentication and authorization. OpenID Connect Client Initiated Backchannel Authentication Flow is an authentication flow…
Good security starts at the login screen. With the WWPass mobile app or token, users can easily log in to all their enabled applications without the need for inherently insecure username/password…
Due to tightening regulations, increased usage of third-party applications, and the sheer volume of breaches caused by weak credentials, single sign-on (SSO) is increasingly becoming a ubiquitous…
In this blog we will detail a relatively easy way to get a functioning Redis-cluster to cache session data and tokens generated by the Gluu Server. The lessons here can be used for any other utility…
Auth0 likes to espouse the benefits of JWTs for authentication: JWTs aren’t great for security though… they’re great for the bottom line. When you’re doing 42 million logins per day, reducing “round…
Gluu is not really a great place to store policies. While you can express policies in Gluu Server RPT interception scripts, if you have more then a few policies, this approach does not scale. For a…
There are three types of tokens: Money Tokens (like Bitcoin, Ethereum, Ripple or Zcash), Asset Tokens (an instrument that promises future remuneration, such as a percentage of company profits), and…
Some organizations might find it helpful to configure their Gluu Server to issue longer user or client sessions. Longer sessions mean fewer authentications, which, in many circumstances, can offer a…
At IIW XXVI last week, there was much excitement about innovations in SSI. It’s tempting to hope that it’s the dawn of a new era, one in which people free themselves from the evil lords of federated…
