apereo/cas

Features

• Single Sign-On Solutions - Coordinates access between service providers and identity providers using standard industry protocols to enable single sign-on.
• User Authentication Systems - Provides a single entry point for verifying user identities using shared databases and directories.
• Distributed Session Caching - Synchronizes authentication data across multiple server nodes using distributed caches to ensure high availability.
• Identity - Functions as a unified core that translates identity data between different standards including SAML, OAuth2, and OpenID Connect.
• Attribute Release Policies - Implements a rule-based engine to control the release of user profile data and permissions to connected applications.
• Client Registries - Maintains a registry of authorized services and assigns specific authentication policies to each client application.
• Authentication Gateways - Acts as a security layer that supports diverse verification methods and enforces access policies.
• Authentication Managers - Provides a centralized system for handling user identity and session persistence across multiple web applications.
• Consent Management - Controls which user profile attributes are released to applications and manages the user consent process.
• Attribute-based Access Controls - Implements a system to determine which user profile attributes are released based on defined security policies.
• Identity Management - Verifies user identities and attributes centrally to ensure consistent access control across all connected applications.
• Attribute Release Policies - Controls which pieces of identity data are released to service providers and manages the user consent process.
• Identity Authentication - Verifies user identities through a single point of entry for multiple applications using shared backend stores.
• Identity Federation Providers - Delegates user authentication to external third-party or corporate identity providers using standardized protocols.
• Identity Providers - Operates as a centralized service providing unified authentication and authorization via SAML, OAuth2, and OIDC.
• Identity Servers - Provides a centralized platform for authentication, authorization, and federation services.
• Authentication Pipelines - Implements a sequential verification chain that intercepts the login flow to require secondary credentials.
• Multifactor Authentication - Requires a second form of verification via hardware keys, mobile apps, or security services to increase account security.
• Single Sign-On - Exchanges authentication data using industry standards including SAML, OAuth2, OpenID Connect, and CAS.
• Enterprise SSO Integrations - Supports industry-standard SSO protocols like CAS, SAML, OAuth2, and OpenID Connect to verify user identities.
• Attribute Release Policies - Manages the release of specific user profile data and permissions to connected applications.
• Authentication Backends - Provides a modular driver system to verify identities against various databases, directories, or external APIs.
• Client Application Registrations - Allows the registration of authorized services and the assignment of specific authentication policies to each client.
• Dynamic Configuration - Allows system settings and behaviors to be modified in real-time without requiring a server restart.
• Account Lifecycle Management - Handles the full lifecycle of user accounts, including password resets, notifications, and administrative impersonation.
• Centralized Identity Management - Consolidates the management of user attributes, password policies, and client registrations in one location.
• OAuth and Identity Providers - Offloads identity verification to third-party services using standardized identity provider protocols.
• Attribute Synchronizations - Implements automated processes to synchronize user profile metadata and attributes from external identity providers.
• Distributed Session Storage - Synchronizes user authentication data across multiple server nodes using distributed session storage to ensure high availability.
• Identity Federation - Delegates authentication to external providers to allow users to sign in using third-party accounts.
• Password Management - Handles user password reset requests and enforces password complexity rules.
• Password Policies - Defines and enforces rules for password complexity, rotation, and mandatory change requirements.
• Policy-Based Access Control - Restricts resource access based on user roles and attributes using centralized authorization policies.
• Role-Based Access Control - Manages user permissions and defines access levels based on assigned roles using external authorization engines.
• Access Control - Provides frameworks and policies for managing resource access through role-based permissions and authorization engines.
• User Account Management - Provides user-facing tools for managing account security, updating passwords, and handling terms of use.
• Audit Event Buses - Provides a centralized logging architecture that captures security events and publishes them to external monitoring systems.
• Administrative Interfaces - Provides web-based dashboards for monitoring system statistics and overseeing client registrations.
• Centralized Logging Systems - Aggregates security audits and system logs centrally for distribution to downstream monitoring systems.
• Security Audit Logs - Captures and centralizes authentication logs to track the execution of security policies.
• System Configuration Management - Offers a dedicated interface for managing system-wide logging, monitoring, and client registration settings.
• Message Queues - Enterprise-grade single sign-on and authentication service.

Star history