wso2/product-is
Product Is
This platform is an identity and access management suite designed to secure and coordinate digital identities for employees, customers, and automated agents. It functions as an enterprise authentication server, providing centralized single sign-on and multi-factor authentication capabilities to protect access across diverse internal and external applications. The engine operates through event-driven orchestration, triggering modular handlers to process authentication and authorization requests.
The system is built on a Java-based middleware architecture that utilizes a dynamic component model to manage independent software modules. It distinguishes itself by offering a self-hosted infrastructure that allows organizations to maintain complete ownership of their identity services on-premises or within private clouds. By employing service-oriented protocol abstraction, the platform decouples identity providers from applications, translating various security protocols into a unified internal representation for consistent access control.
The software supports flexible deployment across various environments, with system behavior and security policies managed through structured configuration files. It provides comprehensive installation and lifecycle management support for both Windows and Unix-based operating systems, including options to run as a background service.
Features
- Event-Driven Orchestration - Processes authentication and authorization requests by triggering modular handlers based on incoming identity events.
- Enterprise Authentication - Acts as a centralized service providing single sign-on and multi-factor authentication to protect application access.
- Identity and Access Management Servers - Provides a centralized platform for managing user identities, authentication, and authorization policies across diverse enterprise environments.
- Identity Deployment Orchestrators - Supports hosting identity services across diverse environments to maintain infrastructure control and avoid vendor lock-in.
- Identity Services - Enables organizations to deploy and maintain complete ownership of their identity services on-premises or within private clouds.
- Enterprise Identity Providers - Provides scalable enterprise-grade infrastructure for managing complex identity and access workflows.
- Dynamic Modules - Uses a dynamic component model to load and manage independent software modules within a single Java virtual machine.
- Protocol Abstraction Layers - Decouples identity providers from applications by translating various security protocols into a unified internal representation.
