Gluu Publishes Open Source Mobile Phone Authentication Software to Enable Derived Credentials

oxPush enables a person to receive an almost instantaneous out-of-band "mobile push" notification to enable any smart device to serve as the "something you have."

Austin, Texas (I-Newswire) December 21, 2013 - Gluu announced today that development of its new open source mobile two-factor authentication app and server platform, oxPush, has been completed and is now available for enterprise use. oxPush is an Apache Cordova project, and is a single html5 page. Organizations can customize this page, and distribute their own branded app for authentication. Cordova can be deployed on Android, IOS, Windows and Blackberry mobile platforms.

Gluu's goal was to publish a free and customizable alternative to commercial authentication services. "Currently organizations present a very specific user experience for Web authentication. A similar amount of control is desirable for mobile authentication," said Michael Schwartz, Gluu CEO. "An open source platform like oxPush makes it easier for an organization to implement the hooks to enable derived credentials by utilizing the mobile PKI and biometric capabilities of the device."

Of the numerous commercial solutions available, many organizations are turning to mobile two-factor authentication (2FA) to augment their existing systems. An obvious choice, mobile two-factor authentication is appealing because of its user friendly nature, economic cost structure and security effectiveness. However, despite acknowledged security concerns and high levels of account hacking and personal data theft, many organizations have been slow to adopt and implement stronger forms of authentication.

"We felt that an open source alternative to pay-per-user type two-factor authentication solutions would lower the barriers for more organizations to implement better security," said Schwartz. "There is no license fee for passwords. And it may sound silly, but businesses are simply not used to the idea that they need to pay for authentication."

oxPush is published under an MIT open source license, and the implementation script can be downloaded for free on the OX Wiki. After an organization implements oxPush, users will be prompted to download the application upon their first authentication attempt, bind their device with their account via a QR code snapshot, and then approve all subsequent authentication attempts via an out-of-band (OOB) push to their mobile phone.

oxPush, used with the Gluu Server is a fully customizable, standards-based authentication and authorization solution that is designed to run "out-of-the-box" on your existing hardware or a dedicated cloud server provided by Gluu. For a complete list of current two-factor authentication solutions supported by the Gluu Server, visit this page.

Schedule your demo of the complete, integrated solution today.

About Gluu:

Gluu provides design, build, and operational services to organizations that want to deploy OX for mission critical authentication and authorization. The "OX" open source project, maintained by Gluu, implements two profiles of OAuth 2.0: OpenID Connect for authentication and UMA for authorization. A subscription to the Gluu Server, Gluu's flagship service, enables an organization to quickly deploy one or more OX instances for their Internet domain, on the IAAS platform of their choice, to enable single sign-on, multi-factor authentication, and web access management.

About Gluu

About Gluu: Gluu provides IT services to large organizations to help them design, build, and operate   More.. authentication and authorization ("AA") systems to secure web and mobile applications using open source
software. Gluu leverages open standards such as OAuth 2.0, SAMLLess..

Contact Information

Daniel Binkley
621 East 6th Street
Suite 200
Phone : 877-464-6972

Published in:

Technology > Software

Published On:

December 21, 2013

Print Release:

Print Release

If you have questions regarding information in this press release contact the company listed above. is a press release service and not the author of this press release.The information that is on or available through this site is for informational purposes only and speaks only as of the particular date or dates of that information. As some companies and PR Agencies submit their press releases once per week,month or quarter, make sure to check the official company website for accurate release dates as our site displays the press release distribution date only.We do not guarantee the accuracy or completeness of information on or available through this site, and we are not responsible for or omissions in that information or for actions taken in reliance on that information.

Related Releases

Post-NAB 2014 Editors' Lounge To Feature The Latest From Avid
Product designers and managers are coming from the Massachusetts office to give demonstrations throughout the evening and will be available to answer questions and discuss Avid's strategy and vision for the future

Future Electronics Offers the New 85V Half Bridge MOSFET Driver MIC4605 Series from Micrel
Future Electronics offers the new 85V half bridge MOSFET driver MIC4605 Series from Micrel.

How to Organize IOS Apps Better
Google Play tops iOS App Store downloads thanks to the iOS apps growing popularity. The longer users have an iPhone, iPad, the more apps they'll add on the device. So it becomes increasingly important to know how to organize their iOS apps better.

Riaxe Launches Free SWF to SVG Online Converter
Riaxe is pleased to announce that it has launched a free to use SWF (Flash) to SVG (Scalable Vector Graphics) online converter.

Designs2HTML Delivers 100% Pixel-perfect WP Themes Starting at $129
Designs2HTML has been indulged in delivering finest markup conversions for websites belonging to both, small-scale enterprise owners as well as the huge industry giants.