Skip to content

ThumbSignIn#

ThumbSignIn can be integrated with Gluu Server to achieve strong authentication for enterprise applications. The administrator of an organization can deploy the ThumbSignIn Java SDK, UI components and custom Jython script in the Gluu server.

Here, ThumbSignIn is integrated with Gluu server as a primary authenticator to achieve passwordless login. The user will be able to log into the Gluu server with just his/her biometrics.

The first time user can log in with his/her LDAP credentials and then can register through the ThumbSignIn mobile app. For the subsequent logins, the user can directly login to Gluu server with his/her biometric.

Prerequisites#

Integrate ThumbSignIn with the Gluu Server#

Download ThumbSignIn UI components and Jython Script#

  1. Download the UI components from here and add them into the source code under oxAuth/Server/src/main/webapp/auth/
  2. Download the Jython custom scripts from here and add them into the source code under oxAuth/Server/integrations/
  3. Download the ThumbSignIn java sdk jar file from here and add it into the Gluu Server's opt/gluu/jetty/oxauth/lib/ext folder

Enable custom scripts for ThumbSignIn#

  1. Log into the Gluu admin dashboard -> Manage Custom Scripts -> Click "Add Custom Script Configuration" button
  2. Add the custom ThumbSignIn interception script and select the "Enabled" option
  3. Add the following custom parameters and save the custom script configuration:
Property Status Description Value
ts_host Mandatory The URL of the ThumbSignIn API server https://api.thumbsignin.com
ts_apiKey Mandatory These keys are required for ThumbSignIn authentication Follow the below steps to get API key
ts_apiSecret Mandatory These keys are required for ThumbSignIn authentication Follow the below steps to get API secret key

Configure ThumbSignIn Account#

The ts_apiKey and ts_apiSecret key can be generated by following these steps:

  1. Sign up for a ThumbSignIn account
  2. Enter your email address and click Try It
  3. Scan the QR code displayed on your screen using the ThumbSignIn mobile app
  4. After successful registration, you'll be redirected to the home page
  5. Click My Apps on the menu
  6. Use the Application ID as the ts_apiKey parameter
  7. Use the Secret Key as the ts_apiSecret parameter

Find keys at top

Enable ThumbSignIn as default authentication in the Gluu Server#

Navigate in the Gluu Server UI to Manage Authentication -> Default Authentication Method and select thumbsignin as the Default acr, then click update

default authn

Go to JSON Configuration -> oxAuth Configuration and set the sessionIDUnauthenticatedUnusedLifetime parameter to 240 seconds

Test the ThumbSignIn integration with Gluu#

To test the ThumbSignIn login flow, simply navigate to the Gluu login URL. If you see the following login page, the integration was successful:

Successful Integration

For more information about ThumbSignIn, see their website.