edit

Super Gluu Documentation#

Super Gluu is a secure authentication mobile application based on the free open source oxPush3 code.

Super Gluu is tightly bundled with the Gluu Server, a free open source identity and access management platform, and can be used to achieve strong authentication to applications that leverage the Gluu Server for user login.

The Super Gluu documentation is organized into the following sections:

Security#

During a Super Gluu authentication the Gluu Server does more than look at the device ID to grant access. Super Gluu uses the FIDO U2F endpoints on the Gluu Server to enroll a public key. The private key is stored on the device. When authentication happens, there is a challenge response to ensure that the device has the respective private key.

How to Use Super Gluu#

In order to use Super Gluu you must have a Gluu Server. If you do not already have a Gluu Server, you can follow the installation guide in our documentation. Once you have a Gluu Server installed you can follow the Super Gluu admin guide to configure and begin using Super Gluu for strong authentication to applications.

Workflows#

Super Gluu supports two workflows:

  • It can be used as a one-step authentication, where the person scans a QR code, and the Gluu Server looks up which person is associated with that phone.

  • It can also be used for a two step authentication, where the person logs into a website with username and password, and then receives an out of band push notification to the mobile device to authorize access.

In both cases users are prompted to scan a QR code in order to register their device against their account in the Gluu Server. In the second workflow, where a username and password are required as a first step, the user will begin receiving push notifications for all authentications after the initial device registration process.

Download Super Gluu#

The Super Gluu mobile app can be downloaded for free!

Business Model#

  • By default Super Gluu includes advertisements.

  • Users can upgrade to Ad Free with an in-app purchase for $0.99 per month. If your organization needs to purchase Ad Free licenses for many users, please schedule a meeting with us to discuss bulk pricing.

  • In addition, Super Gluu can be re-skinned, custom branded, and published to the app marketplaces for your organization by Gluu, or even integrated with one of your organization's existing mobile application.

Learn more about our offerings on the pricing section of the Super Gluu website.

NSTIC Funding#

Funding for this project was in part provided by an NSTIC pilot project in which Gluu participated. The base code is available on Github.