CODEWITHSUNDEEP
apachesingle-sign-onshirows-federationfederation
Sohan
Sohan

Reputation: 6809

Can apache Shiro be used to build an Identity Provider?

I am looking with Apache shrio framework. Looking at it authentication and authorization features can i build Identity server provider using shrio framework.

Is it possible to have features like,

Do we need to write everything from scratch or shrio has some API's to handle such kind of features.

I read the documentation where they say about having SSO features based on Sharing of user session with multiple organizations . But i did not see any direct support API's to handle this.

To act as an IDP what shrio gives and what it does not support?

Please suggest.

Thanks, Sohan

Upvotes: 3

Views: 3021

Answers (1)

justin.hughey
justin.hughey

Reputation: 1256

Shiro is a security layer that sits in front of your application. It is a security framework for a (SP) Service Provider that will issue an Authentication Request to your IdP (Identity Provider).

Open source IdP implementations that support SAML:

http://www.gluu.org/docs/

https://shibboleth.net/

This Stack Overflow question covers a way to use SAML to authenticate your user before they reach the application and provide the user's credentials as part of a http header.

Integrating Java Web App with SAML SSO

An alternative to installing and maintaining your own IdP.

https://stormpath.com/

The cost of developing, securing, and maintaining your own identity provider are likely much higher than paying a monthly fee.

Upvotes: 1

Related Questions