mrpvision/gluu

Package SCIM 2.0 User Management of the Gluu Server

Introduction

This is a very simple to use OAuth 2.0 client to connect your Gluu Server. It has minimal dependencies., _(*1)

NOTE: You need to prepare your Gluu server before this package follow this for that. After this you need to insatll this package using composer., _(*2)

Installation

Composer, _(*3)

Run the following to include this via Composer, _(*4)

composer require mrpvision/gluu

Features

• Simplicity
• Works with PHP >= 5.6
• Minimal dependencies;
• Easy integration with your own application and/or framework;
• Does not enforce a framework on you;
• Support List, Create and Update Gluu Users.
• Support List, Create and Update Gluu Groups.

You MUST configure PHP in such a way that it enforces secure cookies! See this resource for more information., _(*5)

API

The API is very simple to use. See the example/ folder for a working example!, _(*6)

API protection

It's clear this API must not be anonymously accessed, however the SCIM standard does not define a specific mechanism to prevent unauthorized requests to endpoints. In this regard there are just a few guidelines in section 2 of RFC 7644 concerned with authentication and authorization., _(*7)

Gluu Server CE allows you to protect your endpoints with UMA (a profile of OAuth 2.0). This is a safe and standardized approach for controling access to web resources. For SCIM protection, we strongly recommend its usage., _(*8)

Alternatively, for testing purposes (as well as learning) you can temporarily enable the test mode. In this "mode" most complexity is taken out of the way so it serves as a quick and easy way to start interacting with your service., _(*9)

In the next section, we will work using test mode. The topic of UMA will be explored later on., _(*10)

License

MIT., _(*11)