Gluu Publishes Open Source Mobile Phone Authentication Software to Enable Derived Credentials

oxPush enables a person to receive an almost instantaneous out-of-band "mobile push" notification to enable any smart device to serve as the "something you have."

Austin, Texas (I-Newswire) December 21, 2013 - Gluu announced today that development of its new open source mobile two-factor authentication app and server platform, oxPush, has been completed and is now available for enterprise use. oxPush is an Apache Cordova project, and is a single html5 page. Organizations can customize this page, and distribute their own branded app for authentication. Cordova can be deployed on Android, IOS, Windows and Blackberry mobile platforms.

Gluu's goal was to publish a free and customizable alternative to commercial authentication services. "Currently organizations present a very specific user experience for Web authentication. A similar amount of control is desirable for mobile authentication," said Michael Schwartz, Gluu CEO. "An open source platform like oxPush makes it easier for an organization to implement the hooks to enable derived credentials by utilizing the mobile PKI and biometric capabilities of the device."

Of the numerous commercial solutions available, many organizations are turning to mobile two-factor authentication (2FA) to augment their existing systems. An obvious choice, mobile two-factor authentication is appealing because of its user friendly nature, economic cost structure and security effectiveness. However, despite acknowledged security concerns and high levels of account hacking and personal data theft, many organizations have been slow to adopt and implement stronger forms of authentication.

"We felt that an open source alternative to pay-per-user type two-factor authentication solutions would lower the barriers for more organizations to implement better security," said Schwartz. "There is no license fee for passwords. And it may sound silly, but businesses are simply not used to the idea that they need to pay for authentication."

oxPush is published under an MIT open source license, and the implementation script can be downloaded for free on the OX Wiki. After an organization implements oxPush, users will be prompted to download the application upon their first authentication attempt, bind their device with their account via a QR code snapshot, and then approve all subsequent authentication attempts via an out-of-band (OOB) push to their mobile phone.

oxPush, used with the Gluu Server is a fully customizable, standards-based authentication and authorization solution that is designed to run "out-of-the-box" on your existing hardware or a dedicated cloud server provided by Gluu. For a complete list of current two-factor authentication solutions supported by the Gluu Server, visit this page.

Schedule your demo of the complete, integrated solution today.

About Gluu:

Gluu provides design, build, and operational services to organizations that want to deploy OX for mission critical authentication and authorization. The "OX" open source project, maintained by Gluu, implements two profiles of OAuth 2.0: OpenID Connect for authentication and UMA for authorization. A subscription to the Gluu Server, Gluu's flagship service, enables an organization to quickly deploy one or more OX instances for their Internet domain, on the IAAS platform of their choice, to enable single sign-on, multi-factor authentication, and web access management.

About Gluu

About Gluu: Gluu provides IT services to large organizations to help them design, build, and operate   More.. authentication and authorization ("AA") systems to secure web and mobile applications using open source
software. Gluu leverages open standards such as OAuth 2.0, SAMLLess..

Contact Information

Daniel Binkley
621 East 6th Street
Suite 200
Phone : 877-464-6972

Published in:

Technology > Software

Published On:

December 21, 2013

Print Release:

Print Release

If you have questions regarding information in this press release contact the company listed above. is a press release service and not the author of this press release.The information that is on or available through this site is for informational purposes only and speaks only as of the particular date or dates of that information. As some companies and PR Agencies submit their press releases once per week,month or quarter, make sure to check the official company website for accurate release dates as our site displays the press release distribution date only.We do not guarantee the accuracy or completeness of information on or available through this site, and we are not responsible for or omissions in that information or for actions taken in reliance on that information.

Related Releases

Teamgum - Team Collaboration Through Browser Extension, Demos at TNW BOOST - Europe
Teamgum, a browser extension is the simplest way for teams to share and collaborate over webpages. It leverages the fact that most users discover knowledge on the internet and enables them to share web links without leaving the browsing page. Teamgum

KantanMT Launches Machine Translation Kickstart Program
KantanMT consultants provide technology and business guidance to Machine Translation users, focussing on creating a long term strategy with high value returns.

Perle Products Not Vulnerable to Heartbleed Bug
Perle has confirmed that all products and firmware do not incorporate the affected versions of OpenSSL.

RAVN Systems Releases RAVN Connect Enterprise
RAVN Systems, experts in Enterprise Search, Unstructured Big Data analytics and Knowledge Management solutions, are pleased to announce the release of RAVN Connect Enterprise.

GlacialLight Introduces Arcturus Series 50W Low Bay Lights - GL-BL50
GlacialLight's new Arcturus series of GL-BL50 Low Bay Lights offers an energy efficient 50 Watt Phillips LUXEON LED provides enough light for almost any indoor application.