Super Gluu

This mobile application can be used to achieve multi-factor authentication to a Gluu Server. It supports two workflows. It can be used as a one-step authentication, where the person scans a QR code, and the Gluu Server looks up what person is associated with that phone. It can also be used for a two step authentication, where the person logs in with a username and password, and then the person receives an out of band push notification to the mobile device to authorize access.

The Gluu Server does more than look at the device ID to grant access. This application uses the FIDO U2F endpoints on the Gluu Server to enroll a public key. When authentication happens, there is a challenge response to ensure that the device has the respective private key.

The Gluu Server is an identity and access management suite that implements open web federation standards like SAML, OpenID Connect, UMA and other OAuth2 profiles. Free open source distributions are available for several linux distributions, including Centos, Ubuntu and Red Hat. The Gluu Server enables organizations to provide central API's for user authentication and API access management. For more information, please see our website http://gluu.org