Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This page gathers information about implementation efforts and interest, along with interoperability testing plans. Maciej Machulak is the UMA group's implementation coordinator. Key existing implementations that we know about are noted below, in alphabetical order of the project or organization.We undertook a bounty program in 2010 that facilitated the creation of test cases.

Interoperability Testing

See the Interoperability Testing page for details of the "UMA1" interop event and activities. That page may have a more up-to-date list of implementations than this page, including implementations that are participated in interop testing.

Cloud Identity Limited implementations

The Cloud Identity Limited company (also at @CloudIdentityUK) offers a commercial UMA Authorization Server that implements the full UMA protocol. The company also offers Software Development Kits (SDKs) in Java and Python programming languagesPython SDKs. More information can be found on the company's website and the company's YouTube channel. The company has integrated UMA with its Connect service to simplify the flow for Host and Requester applications.

Fraunhofer AISEC project

This Java implementation has been contributed to Apache Amber. Developer documentation is available. Update from the team as of 9 Jul 2012: "UMA client, AM, and Host are running now within AISEC domain and will be accessible from the outside after receiving the security clearance from our network team".

OXAuth project

Gluu OX implementations

The company Gluu (also at @GluuFederation) hosts the OXAuth open-source project, to which it has contributed an UMA component. The main use case for this implementation is enterprise usage. See ; see the Enterprise UMA case study, the March 2014 "UMA for the Enterprise" webinar slides and recording, Gluu's UMA page, and its YouTube channel for more info.

Gluu has also implemented a crowdfunded Apache server plugin that enables web apps in an Apache container to be UMA-protected.

Gluu has also proposed an "OX UMA claim profile"; for more information, see the Third-Party Profiles page.

SMART project

This Java implementation includes an UMA/j framework and sample applications. See the SMART blog. The OAuth portion, originally named leeloo, has been was contributed to Apache Amber (now Apache Oltu, which is going to include OpenID Connect and good JWT support too). Part the SMART project involves development of set of open-source Python libraries, called Puma, for UMA-enabling web apps to become UMA resource servers and clients. The SMARTAM.net authorization server is a running AS that third-party resource servers and clients can interact with if they wish.

...

.