Integrating Apache
Syncope with Apache CXF
        Dr. Colm Ó hÉigeartaigh
Agenda
●   Introducing Apache Syncope
●   Apache Syncope architecture
●   Apache Syncope demo
●   Syncope 1.1.0 - Integrating Apache CXF
    with Apache Syncope
●   Apache CXF and Syncope demo
About me
Identity Management
●   IdM is concerned with managing user data
    on systems + applications.
●   Involves User attributes, roles, resources,
    entitlements, etc.
●   Who has access to What, When, How, and
    Why?
Introducing Apache Syncope
●   Apache Syncope is an Open Source
    system for managing digital identities in
    enterprise environments, implemented in
    JEE technology and released under
    Apache 2.0 license.
Syncope @ Apache
Apache Syncope architecture
Workflow Example
Connectors
Persistence
Containers
REST API
●   Core functionality exposed via a REST API
●   For example:

                         GET /users.json




        [{"attributes":[
           {"schema":"fullname","values":["white"], "readonly":false},
           {"schema":"loginDate","values":["2009-05-26","2010-05-26"],
           ...
Console
          ●   Web management
              interface.
          ●   Uses Apache
              Wicket
          ●   Communicates with
              the core via REST.
Apache Syncope Demo – part I



Deploy       Persist




                       Synchronize
Apache Syncope 1.1.0
●   Role provisioning.
●   OSGi support.
●   Upgrade to Apache Wicket 6.
●   Rest API Upgrade.
●   Introducing Apache CXF WS Stack
REST API upgrade
●   1.0.X REST API redesigned to apply
    RESTful best practices, e.g.
●   use HTTP operations instead of URL
    encoded operation names
●   GET does not modify any object
●   CREATE operations return location URL in
    header for newly created object
Apache CXF
●   One of the leading web service
    frameworks.
●   Supports JAX-WS and JAX-RS.
●   Protocols: SOAP, XML/HTTP, RESTful
    HTTP, CORBA, etc.
●   Transports: HTTP, JMS, JBI, etc.
●   Comprehensive WS standards support.
Integrating CXF with Syncope
●   New REST API powered by CXF
●   Using JAXB + JAX-RS annotations instead
    of Spring annotations.
●   Full power of CXF stack now available to
    Syncope...



     STS?                         SAML?
Apache Syncope Demo – part II




                            Authenticate   Authentication
                               User         Response


              “double-it”




           “double-it response”
Further Information + Questions
●   http://syncope.apache.org/
●   http://cxf.apache.org/
●   http://coheigea.blogspot.com

Integrating Apache Syncope with Apache CXF

  • 1.
    Integrating Apache Syncope withApache CXF Dr. Colm Ó hÉigeartaigh
  • 2.
    Agenda ● Introducing Apache Syncope ● Apache Syncope architecture ● Apache Syncope demo ● Syncope 1.1.0 - Integrating Apache CXF with Apache Syncope ● Apache CXF and Syncope demo
  • 3.
  • 4.
    Identity Management ● IdM is concerned with managing user data on systems + applications. ● Involves User attributes, roles, resources, entitlements, etc. ● Who has access to What, When, How, and Why?
  • 5.
    Introducing Apache Syncope ● Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in JEE technology and released under Apache 2.0 license.
  • 6.
  • 7.
  • 8.
  • 9.
  • 10.
  • 11.
  • 12.
    REST API ● Core functionality exposed via a REST API ● For example: GET /users.json [{"attributes":[ {"schema":"fullname","values":["white"], "readonly":false}, {"schema":"loginDate","values":["2009-05-26","2010-05-26"], ...
  • 13.
    Console ● Web management interface. ● Uses Apache Wicket ● Communicates with the core via REST.
  • 14.
    Apache Syncope Demo– part I Deploy Persist Synchronize
  • 15.
    Apache Syncope 1.1.0 ● Role provisioning. ● OSGi support. ● Upgrade to Apache Wicket 6. ● Rest API Upgrade. ● Introducing Apache CXF WS Stack
  • 16.
    REST API upgrade ● 1.0.X REST API redesigned to apply RESTful best practices, e.g. ● use HTTP operations instead of URL encoded operation names ● GET does not modify any object ● CREATE operations return location URL in header for newly created object
  • 17.
    Apache CXF ● One of the leading web service frameworks. ● Supports JAX-WS and JAX-RS. ● Protocols: SOAP, XML/HTTP, RESTful HTTP, CORBA, etc. ● Transports: HTTP, JMS, JBI, etc. ● Comprehensive WS standards support.
  • 18.
    Integrating CXF withSyncope ● New REST API powered by CXF ● Using JAXB + JAX-RS annotations instead of Spring annotations. ● Full power of CXF stack now available to Syncope... STS? SAML?
  • 19.
    Apache Syncope Demo– part II Authenticate Authentication User Response “double-it” “double-it response”
  • 20.
    Further Information +Questions ● http://syncope.apache.org/ ● http://cxf.apache.org/ ● http://coheigea.blogspot.com