Welcome!

DevOps Journal Authors: Liz McMillan, Yeshim Deniz, Pat Romanski, Elizabeth White, Mike Kavis

News Feed Item

WSO2 Introduces Industry’s First Enterprise Identity Bus With the Launch of WSO2 Identity Server 5.0

The dream of enterprise security based on one unifying identity has faded. It has been displaced by the reality of multiple identities in the era of the connected business where the cloud, mobile computing, and APIs are helping to extend processes to customers, partners, and other groups within the organization. Now, just as organizations have turned to the enterprise service bus (ESB) to connect their disparate systems, businesses are realizing the need for an enterprise identity bus (EIB) to connect and manage their various identities based on multiple standards. Today, WSO2 addresses this demand with the launch of WSO2 Identity Server 5.0, the industry’s first enterprise identity bus.

The latest release of the award-winning WSO2 Identity Server adds significant new capabilities for managing the many security standards now in use across enterprises, including:

  • Identity token transformation and mediation for seamless integration between internal applications and cloud apps, such as Salesforce, Google Apps, and Microsoft Office 365.
  • New user and group provisioning capabilities, which enable WSO2 Identity Server to translate and broker provisioning requests across a range of security, Web and cloud standards.
  • Multi-option and multi-step authentication to provide flexibility in selecting authentication options and enable robust multi-factor authentication.

“Through the cloud, mobile, APIs, social media, and Internet of Things, enterprises are creating new connections across employees, customers and partners—and introducing a dizzying array of standards for identifying these users,” said Paul Fremantle, WSO2 co-founder and CTO. “The release of our WSO2 Identity Server 5.0, the industry’s first enterprise identity bus, embraces this diversity by providing a central backbone for managing user identities, regardless of the standards on which they are based.”

Robust Identity Management On-premises and in the Cloud

Version 5.0 builds on the proven performance of WSO2 Identity Server 4.5, the enterprise-ready, 100% open source, lean, component-based software, which has been in production in Global 1000 enterprises since 2009.

WSO2 Identity Server enables enterprise architects and developers to improve the user’s experience by reducing identity provisioning time, guaranteeing secure online interactions, and delivering a reduced single sign-on (SSO) environment. It also decreases the burden of identity management and entitlement management by including role-based access control, attribute-based access control, fine-grain policy-based access control, and SSO bridging. Featuring full native multi-tenancy, WSO2 Identity Server can run on servers, in a private cloud, public cloud or hybrid cloud environment—all from the same software.

Support for System for Cross-domain Identity Management (SCIM) for identity provisioning facilitates user management operations across software as a service (SaaS) applications. Additionally, federated identity provider (IdP) functionality allows different organizations to make shared services available—for example different universities sharing certain resources with each other’s faculty or students—while enabling single sign-on simplicity for end users. Such federated IdP is particularly important for facilitating authentication across extremely large deployments associated with the cloud and platform as a service (PaaS).

“We have had great success implementing WSO2 Identity Server for user authentication as part of the solutions we’re delivering based on the WSO2 Carbon middleware platform and WSO2 Private PaaS,” said Kambiz Darabi, managing director at m-creations, a German IT consultancy dedicated to mobile IT. “We are excited about the new capabilities being launched with version 5.0, which address the challenges of linking together heterogeneous systems and the growing demand to integrate internal and cloud applications.”

“The SSO environment implemented with WSO2 Identity Server has fully met our expectations and is enabling us to realize the goals we set out for simplifying our user identity administration,” said Abdullah Al Tahhan, a senior project manager at ELM, a trusted provider of secure electronic services in Saudi Arabia. “We are quite pleased with WSO2’s technology, but more than anything, when we think of future engagements, we are going to think of WSO2 because of the great support.”

Introducing Enterprise Identity Bus Capabilities

WSO2 Identity Server 5.0 adds significant new functionality to facilitate identity management across multiple identity standards, devices, domains and applications—on-premises and in the cloud.

Identity token transformation and mediation – With version 5.0, WSO2 Identity Server is capable of performing transformation and mediation between any identity token, including Security Assertion Markup Language (SAML) 2.0, OAuth 1.0/2.0, OpenID, OpenID Connect, and WS-Federation (passive).

Identity token transformation and mediation enables seamless integration between an enterprise’s internal applications running on servers or in a private PaaS and cloud applications, such as Salesforce, Google Apps, and Microsoft Office 365. Additionally, users can bring their own IDs to connect to enterprise systems. For example, Salesforce requires a SAML token for authentication, but a user may want to connect using OpenID. WSO2 Identity Server directs the user to any OpenID provider and translates the token to the correct SAML format for SalesForce to consume. SalesForce only needs to trust WSO2 Identity Server, which acts as a federation bus across all applications.

New user and group provisioning capabilities – WSO2 Identity Server 5.0 can be used to automatically provision users and groups of users onto various platforms. This provisioning can be explicit by pushing the user/group definition to the target system or just-in-time as the user logs in. Integrated with a federated identity provider, just-in-time provisioning enables a corresponding subject to be provisioned to its internal user store and any other provisioning system.

Through the provisioning bridge, WSO2 Identity Server 5.0 also can transform SCIM and SOAP-based provisioning requests into provisioning requests to other formats, such as Service Provisioning Markup Language (SPML) 2.0, Salesforce, Google Apps, Lightweight Directory Access Protocol (LDAP), Active Directory, and Java Database Connectivity (JDBC). In addition to these predefined connectors, which are available out of the box, the WSO2 Identity Server 5.0 runtime can work with custom provisioning connectors.

Multi-option and multi-step authentication – With WSO2 Identity Server 5.0, a service provider, irrespective of the protocol it supports, can select one or more login options that it wants to present to users, such as user name and password, Facebook, SAML or OpenID Connect. Additionally, the service provider can enforce multi-factor authentication by choosing multiple steps that align the right authenticators with the right step.

Additional New Features – WSO2 Identity Server 5.0 includes other new features to provide greater ease of use and facilitate user provisioning and management. With this latest release:

  • A Web-based dashboard for end users provides an intuitive, friendly alternative to the administration console for user management tasks, such as updating the user profile, associating social logins to the profile, changing the security challenge questions, resetting the password, managing an OpenID profile, and viewing identity providers.
  • Remote user store management makes it possible to manage heterogeneous user stores distributed across different data centers from a single WSO2 Identity Server node.

WSO2 Identity Server Builds on WSO2 Carbon Platform

WSO2 Identity Server is part of the modular, fully componentized OSGi-compliant WSO2 Carbon enterprise middleware platform. Like all WSO2 middleware products in the award-winning WSO2 Carbon platform, it is inherently cloud-enabled and uses proven core framework components that provide a consistent set of enterprise-class management, security, clustering, logging, statistics, tracing, and other capabilities. Additionally, it offers a graphical management console, which is integrated with other WSO2 middleware products, for configuration, management and monitoring. As a result, enterprises have unprecedented flexibility to enrich WSO2 Identity Server by adding any of the features in the WSO2 Carbon central repository, which are based on 175-plus components.

Availability and Support

WSO2 Identity Server 5.0 is available today as a software download that can run directly on servers or on top of WSO2 Private PaaS, and as a WSO2 Cloud Virtual Machine running on the Amazon Elastic Computing Cloud (EC2), Linux Kernel Virtual Machine (KVM), and VMware ESX. Additionally, customers can choose to have WSO2 host WSO2 Identity Server through the WSO2 Managed Cloud service. As a fully open source solution released under the Apache License 2.0, it does not carry any licensing fees.

WSO2 Identity Server is backed by a world-class technical team in which the experts that helped create the software provide support, leading to direct and immediate access to the people with in-depth knowledge of the middleware. WSO2 service and support options include evaluation support, a special QuickStartSM consulting program, development support, and production support.

About WSO2

WSO2 delivers on the promise of the connected business with the only completely integrated enterprise platform that enables businesses to build, integrate and manage their APIs, applications, and Web services on-premises, in the cloud, and on mobile devices. Leading enterprise customers worldwide rely on WSO2’s award-winning 100% open source platform and its robust governance and DevOps functionality for their mission-critical applications. Today, these businesses represent nearly every sector: health, financial, retail, logistics, manufacturing, travel, technology, telecom and more. Visit http://wso2.com to learn more, or check out the WSO2 community on the WSO2 Blog, Twitter, LinkedIn, and Facebook.

Trademarks and registered trademarks are the properties of their respective owners.

More Stories By Business Wire

Copyright © 2009 Business Wire. All rights reserved. Republication or redistribution of Business Wire content is expressly prohibited without the prior written consent of Business Wire. Business Wire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

Latest Stories from DevOps Journal
Founded in 1997, ActiveState is a global leader providing software application development and management solutions. The Company's products include: Stackato, a commercially supported Platform-as-a-Service (PaaS) that harnesses open source technologies such as Cloud Foundry and Docker; dynamic language distributions ActivePerl, ActivePython and ActiveTcl; and developer tools such as the popular Komodo Edit and Komodo IDE. Headquartered in Vancouver, Canada, ActiveState is trusted by customers and partners worldwide, across many industries including telecommunications, aerospace, software, financial services and CPG. ActiveState is proven for the enterprise: More than two million developers and 97% of Fortune 1000 companies use ActiveState's solutions to develop, distribute, and manage their software applications. Global customers like Bank of America, CA, Cisco, HP, Lockheed Martin and Siemens rely on ActiveState for faster development, ensuring IT governance and compliance, and accelerating time-to-market.
Qubell, an innovator in application deployment and configuration management, empowers online companies to do what they have never been able to do before: put into consumers' hands innovative new features and services, almost as fast as they can conceive them, without sacrificing control, reliability or uptime. Qubell emerged from stealth in the summer of 2013 (see related press release) and announced that Kohl's completed its initial implementation (see press release). Founded by pioneers in enterprise cloud applications and services, Qubell has its headquarters in Menlo Park, Calif. For more information, visit qubell.com.
BlueBox bridge the chasm between development and infrastructure. Hosting providers are taking standardization and automation too far. For many app developers it does nothing but spawn mayhem and more work. They have to figure out how their creations live on a pre-fab infrastructure solution full of constraints. Operations-as-a-Service is what BlueBox does. BlueBox utilizes development tools such as OpenStack, EMC Razor, Opscode’s Chef and BlueBox's proprietary tools give the power to do the unorthodox things which most hosting providers shun.
SYS-CON Events announced today that Serena Software will exhibit at DevOps Summit Silicon Valley, which will take place on November 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA. Serena Software supports DevOps and Continuous Delivery by providing application deployment automation and software release management solutions to replace slow and error-prone manual processes. 2,500 enterprises around the world trust Serena to help them develop and deploy better software.
DevOps Summit at Cloud Expo Silicon Valley announced today a limited time free "Expo Plus" registration option through September. On site registration price of $1,95 will be set to 'free' for delegates who register during special offer. To take advantage of this opportunity, attendees can use the coupon code, and secure their registration to attend all keynotes, DevOps Summit sessions at Cloud Expo, expo floor, and SYS-CON.tv power panels. Registration page is located at the DevOps Summit site. Your DevOps Summit registration will also allow access to @ThingsExpo sessions and exhibits. Register For DevOps Summit "FREE" (limited time) ▸ Here
The old monolithic style of building enterprise applications just isn't cutting it any more. It results in applications and teams both that are complex, inefficient, and inflexible, with considerable communication overhead and long change cycles. Microservices architectures, while they've been around for a while, are now gaining serious traction with software organizations, and for good reasons: they enable small targeted teams, rapid continuous deployment, independent updates, true polyglot languages and persistence layers, and a host of other benefits. But truly adopting a microservices architecture requires dramatic changes across the entire organization, and a DevOps culture is absolutely essential.
High performing enterprise Software Quality Assurance (SQA) teams validate systems are ready for use – getting most actively involved as components integrate and form complete systems. These teams catch and report on defects, making sure the customer gets the best software possible. SQA teams have leveraged automation and virtualization to execute more thorough testing in less time – bringing Dev and Ops together, ensuring production readiness. Does the emergence of DevOps mean the end of Enterprise SQA? Does the SQA function become redundant?
Achieve continuous delivery of applications by leveraging ElasticBox and Jenkins. In his session at DevOps Summit, Monish Sharma, VP of Customer Success at ElasticBox, will demonstrate how you can achieve the following using ElasticBox and the ElasticBox Jenkins Plugin: Create consistency across dev, staging, and production environments Continuous delivery across multiple clouds to handle high loads Ensure consistent policy management across environments: tagging, admin boxes, traceability Spin up machines and environments quickly Deploy applications to any cloud Enable real-time collaboration between developers and operations
Docker offers a new, lightweight approach to application portability. Applications are shipped using a common container format and managed with a high-level API. Their processes run within isolated namespaces that abstract the operating environment independently of the distribution, versions, network setup, and other details of this environment. This "containerization" has often been nicknamed "the new virtualization." But containers are more than lightweight virtual machines. Beyond their smaller footprint, shorter boot times, and higher consolidation factors, they also bring a lot of new features and use cases that were not possible with classical virtual machines.
WaveMaker CEO Samir Ghosh is taking a new pass at aPaas, and leveraging the increasingly popular Docker open-source platform, with the announcement of WaveMaker Enterprise. The new version of the company's eponymous software “enables instant, end-to-end custom web app creation and management by professional and non-professional developers (alike) and development teams,” according to the company. We asked Samir a few questions about this, and here's what he had to say: Cloud Computing Journal: You've mentioned the previous challenge of business-side developers making that jump from design to deployment. What sort of learning curve will they still face with Wavemaker Enterprise? Samir Ghosh: “Business-side developers” can include non-programming business users or professional developers under tight schedules or with limited mobile or front-end programming expertise. Both can use WaveMaker to meet their app development needs, but may have different deployment needs. I think business users just want their app to run as easily as possible. In WaveMaker, they can literally click a button and their application will run, either on our public cloud or on the enterprise’s private...