Super Gluu Documentation


Super Gluu is a free and secure two-factor authentication (2FA) mobile app.

Super Gluu is tightly bundled with the Gluu Server identity and access management platform, and can be used to achieve 2FA for web and mobile applications that leverage Gluu for authentication.

Super Gluu documentation is organized into the following sections:
Super Gluu 3.1.x is compatible with Gluu Server 3.x and 4.x.
FIDO Security
During Super Gluu authentication, the Gluu Server does more than look at the device ID to grant access. Super Gluu uses the Gluu Server’s FIDO U2F endpoints to enroll a public key. The private key is stored on the device. At authentication time, the Gluu Server sends a challenge response to the device to check for the corresponding private key. This adds an extra layer of security to Super Gluu push notification authentications.
How to Use Super Gluu

Super Gluu is tightly bundled with the Gluu Server. Follow the Gluu installation guide to deploy Gluu, then follow the Super Gluu admin guide to configure and begin using Super Gluu for strong authentication.

Super Gluu supports multiple workflows, including:
In all scenarios, users are prompted to scan a QR code on their first Super Gluu authentication to bind their device and account. In the second and third workflows listed above, users begin receiving push notifications for all authentications after the initial device registration process.
Testing locally

Super Gluu security is based on SSL, and therefore expects a public server with valid certificates. To test locally on a non-public server, follow these steps

The next version of Super Gluu will support localization in many languages. We’d like to extend our sincere appreciation to the following people for helping translate Super Gluu content:
Download Super Gluu
Super Gluu is available for free on the iOS and Android app marketplaces!

If you’d like to provide translations for a language not currently supported, or see typos or grammar issues in your language of choice, please contact us.