This site contains the documentation that is relevant to older WSO2 product versions and offerings.
For the latest WSO2 documentation, visit https://wso2.com/documentation/.

Identity Server Features

Feature

Description

System and User Identity Management
  • Implement flexible user store via built-in LDAP (powered by ApacheDS), external LDAP, Microsoft Active Directory or any JDBC database.
  • API for integrating identity management to any application.
  • Multifactor authentication via XMPP for OpenID.
  • Single Sign-On (SSO) via OpenID, SAML2 and Kerberos KDC.
  • SSO bridging between on-premise systems and cloud apps.
  • Credential mapping across different protocols.
  • Provisioning via SCIM instead of legacy SPML.
  • Auditing via XDAS.
  • Delegation via OAuth 1.0a, OAuth 2.0* and WS-Trust.
  • Federation via OpenID, SAML2 and WS-Trust STS.
  • Integration with Microsoft SharePoint with Passive STS support.
  • Implement REST security with OAuth 2.0* and XACML.
  • Flexible profile management for users supporting multiple profiles per user.
  • XKMS for key storage and distribution.
Entitlement Management
  • Role based access control (RBAC).
  • Attribute or Claim based access control via XACML, WS-Trust, OpenID and claim management.
  • Fine-grained policy based access control via XACML.
  • Advanced entitlement auditing and management.
  • Entitlement management for any REST or SOAP calls.
XACML 2.0/3.0 Support
  • User-friendly interface for policy editing.
  • Multiple Policy Information Point (PIP) support.
  • 'TryIt' tool for exploring policy impact.
  • Policy distribution to various Policy Decision Points (PDPs).
  • Policy decision and attribute caching.
  • High performance network protocol (over Thrift) for PEP/PDP interaction.
  • Notifications for policy updates.
Lightweight, Developer-Friendly and Easy-to-Deploy
  • Complete SOAP API for integrating/embedding into any application or system.
  • Pluggable workflows for privileged operations.
  • Extensibility for pluggable authenticators, alternative user stores, XACML/SAML extension points and more.
  • Clustering for high available deployment.
  • Choice of deployment to on-premise servers, private or public cloud (WSO2 StratosLive Identity-as-a-Service) without configuration changes.
  • Integrated to WSO2 Enterprise Service Bus for authorization and all WSO2 Carbon products for authentication.
Manage and Monitor

Comprehensive management and monitoring Web console with enterprise-level security and SAML2 SSO.

Built-in collection and monitoring of standard access and performance statistics.

JMX MBeans for key metrics monitoring and management.

Integrates with WSO2 Business Activity Monitor for operational audit and KPI monitoring and management.

Flexible logging support with integration to enterprise logging systems.

Centralized configuration management across different deployment environments with lifecycles and versioning with integration to WSO2 Governance Registry.

Open Source Components of WSO2 Identity Server

  • WSO2 Carbon
  • Apache Axis2 (SOAP)
  • Apache Axiom (High performance XML Object Model)
  • Apache Rampart/Apache WSS4J (WS-Security, WS-SecureConversation)
  • Apache Rahas(WS-Trust)
  • WS-Addressing implementation in Axis2
  • Apache Neethi (WS-Policy)
  • WS-SecurityPolicy implementation in Axis2
  • Apache XML Schema
  • OpenID4Java
  • SunXACML
  • OpenSAML2
  • Apache Directory Server