Open Source Java Authentication Software for Windows

Welcome to the home of the Apereo Central Authentication Service project, more commonly referred to as CAS. CAS is an enterprise multilingual single sign-on solution and identity provider for the web and attempts to be a comprehensive platform for your authentication and authorization needs. CAS is an open and well-documented authentication protocol. The primary implementation of the protocol is an open-source Java server component by the same name hosted here, with support for a plethora of additional authentication protocols and features. Monitor and track application and system behavior, statistics and metrics in real-time. Manage and review audits and logs centrally, and publish data to a variety of downstream systems. Manage and register client applications and services with specific authentication policies. Cross-platform client support (Java, .NET, PHP, Perl, Apache, etc).

Spring Security is a powerful and highly customizable authentication and access-control framework. It is the de-facto standard for securing Spring-based applications. Spring Security is a framework that focuses on providing both authentication and authorization to Java applications. Like all Spring projects, the real power of Spring Security is found in how easily it can be extended to meet custom requirements. Spring Security uses a Gradle-based build system. In the instructions, ./gradlew is invoked from the root of the source tree and serves as a cross-platform, self-contained bootstrap mechanism for the build. Be sure that your JAVA_HOME environment variable points to the jdk-11 folder extracted from the JDK download.

A fast, comprehensive, and easy-to-use Java API for communicating with LDAP directory servers and performing related tasks like reading and writing LDIF, encoding and decoding data using base64 and ASN.1 BER, and performing secure communication.

Spring Security (formerly Acegi Security) is now hosted on the Spring Framework website: http://www.springframework.org/spring-security/

HTMF is a Java Hard Token Management Framework used to manage the complete livecycle of an organizations Smartcards and/or USB dongles. It communicates with the tokens through a PKCS11 interface.

The purpose of this project is to demonstrate Information Card interoperability on heterogeneous platforms written using Java language to support Apache Tomcat, JBoss & SUN Application Server platforms running on Linux.

Atricore’s JOSSO is an open source and commercially supported Internet Single Sign-On (FSSO) solution for point-and-click and standards-based (SAML2) Internet-scale SSO implementations. For more information contact us at : http://www.josso.org

SecurityFilter is a Java Servlet Filter that mimics the behavior and configuration format of container managed security, with several development and deployment advantages. See the Home Page for more details.

Kasai is a 100% Java based authentication and authorization framework. It allows you to integrate into your application a granular, complete and manageable permission scheme.

The MACA objective is to provide user authentication, session management and authorization services independently of platform. Authorization servive is based on a contextual role-based access control model that extends NIST RBAC

AccesStream is a Java-based, embeddable identity and access management (IAM), security and access reporting platform. AccesStream includes Single Sign-On using SAML 2.0 and provides profile storage with LDAP v3 access for integration with Linux PAM

BatchSSH (or just bssh) is a command line tool for batch execution of commands over SSHv2. BatchSSH is implemented in Java and is therefore platform agnostic. It support's simple but flexible target host definition, SSH gateways and Single-Sign-On.

Open Source Single Sign-On (SSO) and Identity Management

IdMUnit is an xUnit automated testing framework for Identity Management solutions.

Identityflow provides a framework for building protocol flows that perform distributed Identity operations. Examples of Identity Operations are Single Sign-On (SSO) and Attribute queries.

The new Ionia Student Online is a student information system for high schools, run from a web environment.

The project aims at developing J2EE Connector Architecture 1.0 Compilant Resource Adapters for integrating various EIS's like XML files, XML DB, LDAP, FTP, SMTP, POP3, Point Of Sale, Properties File, Office Documents

Java security module using JAAS with JDBC. A Pluggable Authentication Module (PAM) using database store user information. Contains implementation over Tocam Realm, JBoss JAAS. Sponsored by http://knowledgesurf.com.

A Java component simplifying Directory service programming through LDAP. It uses (and aims to wrap/hide for the developer) JNDI internally.

Lightweight Authentication Module (LAM) is a language-neutral API allowing single-sign-on to be easily implemented across diverse applications. Provides authentication via CAS or other engines, and manages sessions. Client bindings in C#, Perl, or Java.

This is a demonstration of integrating the CAPTCHA service from http://recaptcha.org with Oracle Single-Sign-On. It can be used in production OSSO deployments, and also as an example of integrating any 3rd party authentication system with OSSO.

Remote Single Sign-On Server is concept of a server which avoids a user or an application from logging in on each one of service server of which services it want to use .

A tool for generating objects that allow easy mapping from java to jndi/ldap data storage and integration of different data sources in a transparent data access layer.

Heracles fought and defeated Kerberos (Greek mythology) The Heracles Framework offers an easy way to authenticate a user over Kerberos and to get user information’s from a LDAP directory.

This is an experimental project aimed to Introduce a new concept on object relational persistence focused on LDAPv3 directories.