The Open Identity Gateway (OpenIG) is a high-performance reverse proxy server with specialized session management and credential replay functionality.

OpenIG is an independent policy enforcement point that reduces the proliferation of passwords and ensures consistent, secure access across multiple web apps and APIs. OpenIG can leverage any standards-compliant identity provider to integrate into your current architecture. Single sign-on and sign-off improves the user experience and will vastly improve adoption rates and consumption of services provided.

• Extend SSO to any Application
• Federate Enabling Applications
• Implement Standards Based Policy Enforcement

How it Works

OpenIG is essentially a Java-based reverse proxy which runs as a web application. All HTTP traffic to each protected application is routed through OpenIG, enabling close inspection, transformation and filtering of each request. You can create new filters and handlers to modify the HTTP requests on their way through OpenIG, providing the ability to recognize login pages, submit login forms, transform or filter content, and even function as a Federation endpoint for the application. All these features are possible without making any changes to the application's deployment container or the application itself.

OpenIG works together with OpenAM to integrate Web applications without the need to modify the target application or the container that it runs in.

• Support for identity standards (OAuth 2.0, OpenID Connect, SAML 2.0)
• Application and API gateway concept
• Prepackaged SAML 2.0-based federation
• Password capture and replay
• Works with any identity provider, including OpenAM
• Single Sign-On and Single Log-Out
• 100% open source

License

This project is licensed under the Common Development and Distribution License (CDDL).

Downloads

• OpenIG WAR (All OS)
• OpenIG Docker (All OS)

Java 1.8+ required

How-to build

For windows use:

git config --system core.longpaths true

git clone --recursive  https://github.com/OpenIdentityPlatform/OpenIG.git
mvn -DskipTests -Dmaven.javadoc.skip=true install -f OpenIG
mvn install -f OpenIG

How-to run after build

mvn -f OpenIG/openig-war clean package cargo:run

The next step is then to go to http://localhost:8080 where you'll see the OpenIG welcome page.

How-To Guides

• Run OpenIG from Docker
• How to Integrate OpenIG and Message Brokers
• How To Protect Kubernetes Services With OpenIG
• How To Protect Web Services with OpenIG
• How To Run OpenIG in Kubernetes
• How to setup ICAP Filter for DLP and Antivirus protection with OpenIG
• How to Protect WebSocket Connection with OpenAM and OpenIG

Support and Mailing List Information

• OpenIG Community Wiki: https://github.com/OpenIdentityPlatform/OpenIG/wiki
• OpenIG Community Mailing List: open-identity-platform-openig@googlegroups.com
• OpenIG Community Archive: https://groups.google.com/d/forum/open-identity-platform-openig
• OpenIG Community on Gitter: https://gitter.im/OpenIdentityPlatform/OpenIG
• OpenIG Commercial support RFP: support@3a-systems.ru (English, Russian)

Contributing

Please, make Pull request

Thanks for OpenIG

• Forgerock OpenIG