Identity Server Features

• Implement flexible user store via built-in LDAP (powered by ApacheDS), external LDAP, Microsoft Active Directory or any JDBC database.
• API for integrating identity management to any application.
• Multifactor authentication via XMPP for OpenID.
• Single Sign-On (SSO) via OpenID, SAML2 and Kerberos KDC.
• SSO bridging between on-premise systems and cloud apps.
• Credential mapping across different protocols.
• Provisioning via SCIM instead of legacy SPML.
• Auditing via XDAS.
• Delegation via OAuth 1.0a, OAuth 2.0* and WS-Trust.
• Federation via OpenID, SAML2 and WS-Trust STS.
• Integration with Microsoft SharePoint with Passive STS support.
• Implement REST security with OAuth 2.0* and XACML.
• Flexible profile management for users supporting multiple profiles per user.
• XKMS for key storage and distribution.

• Role based access control (RBAC).
• Attribute or Claim based access control via XACML, WS-Trust, OpenID and claim management.
• Fine-grained policy based access control via XACML.
• Advanced entitlement auditing and management.
• Entitlement management for any REST or SOAP calls.

• User-friendly interface for policy editing.
• Multiple Policy Information Point (PIP) support.
• 'TryIt' tool for exploring policy impact.
• Policy distribution to various Policy Decision Points (PDPs).
• Policy decision and attribute caching.
• High performance network protocol (over Thrift) for PEP/PDP interaction.
• Notifications for policy updates.

• Complete SOAP API for integrating/embedding into any application or system.
• Pluggable workflows for privileged operations.
• Extensibility for pluggable authenticators, alternative user stores, XACML/SAML extension points and more.
• Clustering for high available deployment.
• Choice of deployment to on-premise servers, private or public cloud (WSO2 StratosLive Identity-as-a-Service) without configuration changes.
• Integrated to WSO2 Enterprise Service Bus for authorization and all WSO2 Carbon products for authentication.

Comprehensive management and monitoring Web console with enterprise-level security and SAML2 SSO.

Built-in collection and monitoring of standard access and performance statistics.

JMX MBeans for key metrics monitoring and management.

Integrates with WSO2 Business Activity Monitor for operational audit and KPI monitoring and management.

Flexible logging support with integration to enterprise logging systems.

Centralized configuration management across different deployment environments with lifecycles and versioning with integration to WSO2 Governance Registry.