This 3 hour tutorial covers OX, an open source server that provides OAuth2 and OpenID Connect authentication endpoints. It will demonstrate how to use OX to enable single sign-on, centralized authentication, and strong authentication for web and mobile applications. The tutorial will also cover technical details of OAuth2 profiles like OpenID Connect and UMA, and show how to deploy OX and integrate it with applications using Python and Apache Cordova.

1. Title: Meet OX: OAuth2 Authentication and API Security
Description (400 char): Provide a historical overview of domain authentication services
like RADIUS, LDAP, Kerberos and PKI. Review federation SAML tools and rules. Technical
deep dive into two profiles of OAuth2: OpenID Connect and UMA. The tutorial will
demonstrate how to use OX to launch centralized domain authentication, SSO, and
strong authentication. Integration will be shown for both Web and mobile applications.
Type: 3 hour tutorial
Abstract:
OX is an open source server that provides endpoints for the OpenID Connect and UMA
profiles of OAuth2. It also provides a policy administration point to enable admins to
manage trust with other domains. This tutorial will demystify centralized authentication,
authorization, federation, web access management and mobile applications. It will also
show how to use out-of-band mobile PUSH notifications to shore up password security.

2. OX has been leading the last two OpenID Connect interops. Red Hat and Centos users
need not despair. As this tutorial will demonstrate, OX is not that hard to deploy, as
described on the Wiki .The tutorial will also review how to use Apache 2.4.6 as the
OpenID Connect RP and the UMA client. The demo will also show how a native client,
in this case a Python application, could use the OpenID Connect and UMA APIs to
identify a person, and to authorize access to resources.
Finally, the tutorial will cover how to deploy ox Push ip2d a lightweight server and
Apache Cordova hybrid mobile application which enables a domain to use the Google or
Apple mobile push networks to send a message to a trusted device. It’s one of the first
open source mobile applications for strong authentication, and provides a good
example of a two step authentication: (1) username / password; (2) a mobile push
notification, prompting for approval.
Article Resource: - http://thegluuserver.wordpress.com/2014/06/03/gluu-oscon-
submission/