2 ms·

The product is OpenAM from Forgerock, that is both open source and expensive. https://www.forgerock.com/ https://www.forgerock.com/ Gluu is just a facade compa

The product is OpenAM from Forgerock, that is both open source and expensive. https://www.forgerock.com/ https://www.forgerock.com/ Gluu is just a facade company that's recompiling it from source and distributing the binaries for free. It supports pretty much everything you can dream of, including different password hashing and you can write your own plugins to interface with anything you like. However it's a very complicated product. It's for a large company or a country with a dedicated team to run and customize. P.S. Not affiliated to any of these companies. I had to do the performance assessment of these products some year ago for a government contract. https://thehftguy.com/2015/10/14/iam-benchmarks-openam-vs-wshttpso2-vs-simplesamlphp-vs-shibboleth-2/ https://thehftguy.com/2015/10/14/iam-benchmarks-openam-vs-ws...

jsiepkes 8y ago
Gluu isn't based on OpenAM. Gluu is based on a whole bunch of other products (like Shibboleth) but not OpenAM. OpenAM originated from Sun's OpenSSO when Oracle bought Sun and FrogeRock was created. Incidentally this is the same time Gluu was created. OpenAM is also no longer opensource. The source was closed by Forgerock in the beginning of 2018. One of the forks that sprung from this source closing is wren:security ( https://wrensecurity.org https://wrensecurity.org ). Disclosure: I work on that project ;-)
- user5994461 8y ago
  Good to know. Gluu was built upon and dependent on ForgeRock products last I was working with it. I guess they're having a pretty bad time if ForgeRock pulled the sources.
  - willow9886 8y ago
    The Gluu Server bundles a fork of OpenDJ 3.0 for persistence, the last open source build. It also supports OpenLDAP, and will soon support Couchbase.
willow9886 8y ago
Gluu writes its own software, like the OAuth2 Authorization Server, oxAuth, and bundles other open source software like the Shibboleth SAML IDP.

jsiepkes 8y ago

Gluu isn't based on OpenAM. Gluu is based on a whole bunch of other products (like Shibboleth) but not OpenAM. OpenAM originated from Sun's OpenSSO when Oracle bought Sun and FrogeRock was created. Incidentally this is the same time Gluu was created. OpenAM is also no longer opensource. The source was closed by Forgerock in the beginning of 2018. One of the forks that sprung from this source closing is wren:security ( https://wrensecurity.org https://wrensecurity.org ). Disclosure: I work on that project ;-)

user5994461 8y ago
Good to know. Gluu was built upon and dependent on ForgeRock products last I was working with it. I guess they're having a pretty bad time if ForgeRock pulled the sources.
- willow9886 8y ago
  The Gluu Server bundles a fork of OpenDJ 3.0 for persistence, the last open source build. It also supports OpenLDAP, and will soon support Couchbase.

willow9886 8y ago

Gluu writes its own software, like the OAuth2 Authorization Server, oxAuth, and bundles other open source software like the Shibboleth SAML IDP.