Gluu Publishes Open Source Mobile Phone Authentication Software to Enable Derived Credentials
oxPush enables a person to receive an almost instantaneous out-of-band "mobile push" notification to enable any smart device to serve as the "something you have."
Austin, Texas (I-Newswire) December 21, 2013 - Gluu announced today that development of its new open source mobile two-factor authentication app and server platform, oxPush, has been completed and is now available for enterprise use. oxPush is an Apache Cordova project, and is a single html5 page. Organizations can customize this page, and distribute their own branded app for authentication. Cordova can be deployed on Android, IOS, Windows and Blackberry mobile platforms.
Gluu's goal was to publish a free and customizable alternative to commercial authentication services. "Currently organizations present a very specific user experience for Web authentication. A similar amount of control is desirable for mobile authentication," said Michael Schwartz, Gluu CEO. "An open source platform like oxPush makes it easier for an organization to implement the hooks to enable derived credentials by utilizing the mobile PKI and biometric capabilities of the device."
Of the numerous commercial solutions available, many organizations are turning to mobile two-factor authentication (2FA) to augment their existing systems. An obvious choice, mobile two-factor authentication is appealing because of its user friendly nature, economic cost structure and security effectiveness. However, despite acknowledged security concerns and high levels of account hacking and personal data theft, many organizations have been slow to adopt and implement stronger forms of authentication.
"We felt that an open source alternative to pay-per-user type two-factor authentication solutions would lower the barriers for more organizations to implement better security," said Schwartz. "There is no license fee for passwords. And it may sound silly, but businesses are simply not used to the idea that they need to pay for authentication."
oxPush is published under an MIT open source license, and the implementation script can be downloaded for free on the OX Wiki. After an organization implements oxPush, users will be prompted to download the application upon their first authentication attempt, bind their device with their account via a QR code snapshot, and then approve all subsequent authentication attempts via an out-of-band (OOB) push to their mobile phone.
oxPush, used with the Gluu Server is a fully customizable, standards-based authentication and authorization solution that is designed to run "out-of-the-box" on your existing hardware or a dedicated cloud server provided by Gluu. For a complete list of current two-factor authentication solutions supported by the Gluu Server, visit this page.
Schedule your demo of the complete, integrated solution today.
Gluu provides design, build, and operational services to organizations that want to deploy OX for mission critical authentication and authorization. The "OX" open source project, maintained by Gluu, implements two profiles of OAuth 2.0: OpenID Connect for authentication and UMA for authorization. A subscription to the Gluu Server, Gluu's flagship service, enables an organization to quickly deploy one or more OX instances for their Internet domain, on the IAAS platform of their choice, to enable single sign-on, multi-factor authentication, and web access management.
621 East 6th Street
Phone : 877-464-6972
Tags:identity provider saml shibboleth idp idp shibboleth single sign on server openid connect idp saml federation saml
Published On:December 21, 2013
Print Release:Print Release
If you have questions regarding information in this press release contact the company listed above. I-Newswire.com is a press release service and not the author of this press release.The information that is on or available through this site is for informational purposes only and speaks only as of the particular date or dates of that information. As some companies and PR Agencies submit their press releases once per week,month or quarter, make sure to check the official company website for accurate release dates as our site displays the I-Newswire.com press release distribution date only.We do not guarantee the accuracy or completeness of information on or available through this site, and we are not responsible for or omissions in that information or for actions taken in reliance on that information.
Post-NAB 2014 Editors' Lounge To Feature The Latest From Avid
Future Electronics Offers the New 85V Half Bridge MOSFET Driver MIC4605 Series from Micrel
How to Organize IOS Apps Better
Riaxe Launches Free SWF to SVG Online Converter
Designs2HTML Delivers 100% Pixel-perfect WP Themes Starting at $129