MaxKey’s Single Sign On System, The meaning is the biggest key, is the industry’s leading enterprise-class IAM identity management and identity authentication products, support OAuth 2.0/OpenID Connect, SAML 2.0, JWT, CAS, SCIM and other standard protocols, Provide simple, standard, secure and open user identity management (IDM), identity authentication (AM), single sign-on (SSO), RBAC rights management and resource management.
The official website Official website |’s official website
The following EMAIL: [email protected]
Managed code making | yards cloud (Gitee)
What is Single Sign On, or SSO for short?
Users only need to log in to the authentication authority once to access all the mutually trusted applications without needing to log in again.
Main functions:
1. All applications share an identity authentication system
2. All application systems can identify and extract ticket information
Product features
- Standard certification protocol:
| The serial number | agreement | support |
|---|---|---|
| 1.1 | The 2.0 / OpenID Connect | high |
| 1.2 | SAML 2.0 | high |
| 1.3 | JWT | high |
| 1.4 | CAS | high |
| 1.5 | FormBased | In the |
| 1.6 | TokenBased(Post/Cookie) | In the |
| 1.7 | ExtendApi | low |
| 1.8 | EXT | low |
- Log on to support
| The serial number | Log on to way |
|---|---|
| 2.1 | Dynamic CAPTCHA alphabet/number/arithmetic |
| 2.2 | Two-factor authentication |
| 2.3 | SMS authentication Tencent cloud SMS/Ali cloud SMS/netease cloud letter |
| 2.4 | Google/Microsoft Authenticator/FreeOTP/ supports TOTP or HOTP |
| 2.5 | The Kerberos/SPNEGO/AD domain |
| 2.6 | Social accounts WeChat /QQ/ Weibo/Dingding /Google/Facebook/ others |
- Provide a standard authentication interface for other applications to integrate SSO, secure mobile access, secure API, third party authentication and Internet authentication.
- Provide user life cycle management, support SCIM 2 protocol, based on Apache Kafka agent, through the Connector (Connector) to achieve identity provisioning synchronization.
- Certification center is platform independent, environmental diversity, support Web, mobile phone, mobile devices, such as Apple iOS, Andriod, etc., the certification ability from B/S to mobile applications comprehensive coverage.
- A variety of certification mechanisms coexist, each application system can retain the original certification mechanism, at the same time integrate certification center certification; The application has a high degree of independence, does not depend on authentication center, and can use authentication center authentication, to achieve single sign-on.
- Based on Java platform development, using Spring, MySQL, Tomcat, Apache Kafka, Redis and other open source technologies, support micro services, strong scalability.
- Apache License, Version 2.0, open source, security, independent and controllable.
interface
MaxKey certification
Login screen
The main interface
MaxKey management
Access the report
User management
Application management
download
Current version baidu net disk download, historical version
| version | The date of | Download address | Extract the code |
|---|---|---|---|
| V 2.3.0 GA | 2020/11/11 | A link to download | h3zw |
Roadmap
1. Dynamic user group implementation (based on user attributes or organization)
2. Directorships and part-time agencies
3.MaxKey Cloud(Micro Services Edition) — 2021
4. Zero trust scenario integration
Release notes
MaxKey V 2.3.0GA 2020/11/11
(maxkey-200902) Single point logout function based on Spring session cluster session sharing (maxkey-200902), the application can be configured as NONE/BACK_CHANNEL/FRONT_CHANNEL three ways, Support CAS/SAML/Default (maxkey-200903) user online real-time update function (maxkey-200904) customized user template, achieve batch Excel user import function (maxkey-200905) customized organization template, Implement batch Excel organization import function (MAXKEY-200906) User registration function (MAXKEY-200907) User status modification (MAXKEY-200908) User details display problem (MAXKEY-200909) If the number is greater than 4 when the application is modified, it is considered to be a length formatting problem (Maxkey-200910). After logout, click on the Re-Login Jump problem (Maxkey-200911) to add SP login Jump function. Support for Knox authentication (maxkey-200912) and optimization and update of build scripts (maxkey-200913) If there is no "selection" in the list interface, the pop-up interface is wrong (maxkey-200916) JIB (Docker) support, Thanks to https://github.com/alanland (MAXKEY - 200917) the optimization of the login process optimization (MAXKEY - 200918) certification, support @ Principal injection (MAXKEY - 200919) application of single sign-on, User access control (maxkey-200920) The verification code of the maxkey-mgt project profile Enable not Enable the configuration is not effective (maxkey-200921) Login icon improvement (maxkey-200922) Optimization of the official website (maxkey-200923) Relying on JAR references, updates, and upgrades to druid 1.2.1 Justauth 1.15.8 simple-HTTP 1.0.3 spring-session 2.3.1. Release druid-spring-boot-starter 1.2.1 XMLBeans 3.0.1 Commons - Compress 1.20 POI 4.1.2 Commons - Collections4 4.4