Integrating Apache Syncope with Apache CXF

Integrating Apache Syncope with Apache CXF

Dr. Colm Ó hÉigeartaigh

Agenda● Introducing Apache Syncope● Apache Syncope architecture● Apache Syncope demo● Syncope 1.1.0 - Integrating Apache CXF

with Apache Syncope● Apache CXF and Syncope demo

About me

Identity Management● IdM is concerned with managing user data

on systems + applications.● Involves User attributes, roles, resources,

entitlements, etc.● Who has access to What, When, How, and

Why?

Introducing Apache Syncope● Apache Syncope is an Open Source

system for managing digital identities in enterprise environments, implemented in JEE technology and released under Apache 2.0 license.

Syncope @ Apache

Apache Syncope architecture

Workflow Example

Connectors

Persistence

Containers

REST API● Core functionality exposed via a REST API● For example:

GET /users.json

[{"attributes":[ {"schema":"fullname","values":["white"], "readonly":false}, {"schema":"loginDate","values":["2009-05-26","2010-05-26"], ...

Console● Web management

interface.● Uses Apache

Wicket● Communicates with

the core via REST.

Apache Syncope Demo – part I

PersistDeploy

Synchronize

Apache Syncope 1.1.0● Role provisioning.● OSGi support.● Upgrade to Apache Wicket 6.● Rest API Upgrade.● Introducing Apache CXF WS Stack

REST API upgrade● 1.0.X REST API redesigned to apply

RESTful best practices, e.g.● use HTTP operations instead of URL

encoded operation names● GET does not modify any object● CREATE operations return location URL in

header for newly created object

Apache CXF● One of the leading web service

frameworks.● Supports JAX-WS and JAX-RS.● Protocols: SOAP, XML/HTTP, RESTful

HTTP, CORBA, etc.● Transports: HTTP, JMS, JBI, etc.● Comprehensive WS standards support.

Integrating CXF with Syncope● New REST API powered by CXF● Using JAXB + JAX-RS annotations instead

of Spring annotations.● Full power of CXF stack now available to

Syncope...

SAML?STS?

Apache Syncope Demo – part II

“double-it”

“double-it response”

AuthenticateUser

AuthenticationResponse

Further Information + Questions● http://syncope.apache.org/● http://cxf.apache.org/● http://coheigea.blogspot.com