integrating apache syncope with apache cxf
DESCRIPTION
Talk given at ApacheCon 2013.TRANSCRIPT
Integrating Apache Syncope with Apache CXF
Dr. Colm Ó hÉigeartaigh
Agenda● Introducing Apache Syncope● Apache Syncope architecture● Apache Syncope demo● Syncope 1.1.0 - Integrating Apache CXF
with Apache Syncope● Apache CXF and Syncope demo
About me
Identity Management● IdM is concerned with managing user data
on systems + applications.● Involves User attributes, roles, resources,
entitlements, etc.● Who has access to What, When, How, and
Why?
Introducing Apache Syncope● Apache Syncope is an Open Source
system for managing digital identities in enterprise environments, implemented in JEE technology and released under Apache 2.0 license.
Syncope @ Apache
Apache Syncope architecture
Workflow Example
Connectors
Persistence
Containers
REST API● Core functionality exposed via a REST API● For example:
GET /users.json
[{"attributes":[ {"schema":"fullname","values":["white"], "readonly":false}, {"schema":"loginDate","values":["2009-05-26","2010-05-26"], ...
Console● Web management
interface.● Uses Apache
Wicket● Communicates with
the core via REST.
Apache Syncope Demo – part I
PersistDeploy
Synchronize
Apache Syncope 1.1.0● Role provisioning.● OSGi support.● Upgrade to Apache Wicket 6.● Rest API Upgrade.● Introducing Apache CXF WS Stack
REST API upgrade● 1.0.X REST API redesigned to apply
RESTful best practices, e.g.● use HTTP operations instead of URL
encoded operation names● GET does not modify any object● CREATE operations return location URL in
header for newly created object
Apache CXF● One of the leading web service
frameworks.● Supports JAX-WS and JAX-RS.● Protocols: SOAP, XML/HTTP, RESTful
HTTP, CORBA, etc.● Transports: HTTP, JMS, JBI, etc.● Comprehensive WS standards support.
Integrating CXF with Syncope● New REST API powered by CXF● Using JAXB + JAX-RS annotations instead
of Spring annotations.● Full power of CXF stack now available to
Syncope...
SAML?STS?
Apache Syncope Demo – part II
“double-it”
“double-it response”
AuthenticateUser
AuthenticationResponse
Further Information + Questions● http://syncope.apache.org/● http://cxf.apache.org/● http://coheigea.blogspot.com