Nacho
Gluu OpenID Connect Provider
Gluu's Auth Server, part of the open-source Janssen Project (Linux Foundation, Apache 2.0), is a comprehensive OAuth 2.0 and OpenID Connect implementation historically known as the Gluu Server, now also distributed commercially as Gluu Flex.
Features
If you want to compare OpenID Connect features of different providers, please check out the OpenID Connect Providers benchmark.
Looking for Gluu’s (C)IAM features like MFA, SSO, and user management? View Gluu on the (C)IAM Identity Providers benchmark.
Frequently Asked Questions
Does Gluu support the Authorization Code grant type?
Gluu supports Authorization Code grant type. Read more
Does Gluu support the Refresh Token grant type?
Gluu supports Refresh Token grant type. Read more
Does Gluu support the Client Credentials grant type?
Gluu supports Client Credentials grant type. Read more
Does Gluu support the Implicit grant type?
Gluu supports Implicit grant type. Read more
Does Gluu support the Token Exchange grant type?
Gluu supports Token Exchange grant type. Read more
Does Gluu support the Client Initiated BackChannel Authentication grant type?
Gluu supports Client Initiated BackChannel Authentication grant type. Read more
Does Gluu support the Device Authorization Grant grant type?
Gluu supports Device Authorization Grant grant type. Read more
Does Gluu support the JWT Bearer Token grant type?
Gluu supports JWT Bearer Token grant type. JWT bearer grant type is one of the grant types configurable at the token endpoint. Read more
Does Gluu support the SAML 2.0 Bearer Assertion grant type?
Gluu does not support SAML 2.0 Bearer Assertion grant type.
Does Gluu support the Resource Owner Password Credentials grant type?
Gluu supports Resource Owner Password Credentials grant type. Read more
Does Gluu support the PKCE extension?
Gluu supports PKCE extension. Supports both plain and S256 code challenge methods. Read more
Does Gluu support the PAR extension?
Gluu supports PAR extension. Read more
Does Gluu support the RAR extension?
Gluu supports RAR extension. Rich Authorization Requests via the authorization_details parameter. Read more
Does Gluu support the JAR extension?
Gluu supports JAR extension. Read more
Does Gluu support the Authorization Endpoint endpoint?
Gluu supports Authorization Endpoint endpoint. Read more
Does Gluu support the Token Endpoint endpoint?
Gluu supports Token Endpoint endpoint. Read more
Does Gluu support the UserInfo Endpoint endpoint?
Gluu supports UserInfo Endpoint endpoint. Read more
Does Gluu support the Token Revocation endpoint?
Gluu supports Token Revocation endpoint. Read more
Does Gluu support the Token Introspection endpoint?
Gluu supports Token Introspection endpoint. Read more
Does Gluu support the Device Authorization Endpoint endpoint?
Gluu supports Device Authorization Endpoint endpoint. Read more
Does Gluu support the OpenID Connect Discovery Endpoint endpoint?
Gluu supports OpenID Connect Discovery Endpoint endpoint. Read more
Does Gluu support the OAuth 2.0 Authorization Server Metadata Endpoint endpoint?
Gluu supports OAuth 2.0 Authorization Server Metadata Endpoint endpoint. Read more
Does Gluu support the none token endpoint authentication method?
Gluu supports none token endpoint authentication method. Read more
Does Gluu support the client_secret_basic token endpoint authentication method?
Gluu supports client_secret_basic token endpoint authentication method. Read more
Does Gluu support the client_secret_post token endpoint authentication method?
Gluu supports client_secret_post token endpoint authentication method. Read more
Does Gluu support the client_secret_jwt token endpoint authentication method?
Gluu supports client_secret_jwt token endpoint authentication method. Read more
Does Gluu support the private_key_jwt token endpoint authentication method?
Gluu supports private_key_jwt token endpoint authentication method. Read more
Does Gluu support the tls_client_auth token endpoint authentication method?
Gluu supports tls_client_auth token endpoint authentication method. Mutual TLS client authentication, referenced via the mtlsTokenEndpoint configuration property. Read more
Does Gluu support the none prompt?
Gluu supports none prompt. Read more
Does Gluu support the login prompt?
Gluu supports login prompt. Read more
Does Gluu support the consent prompt?
Gluu supports consent prompt. Read more
Does Gluu support the create prompt?
Gluu does not support create prompt.
Does Gluu support the RP-initiated Logout feature?
Gluu supports RP-initiated Logout feature. Read more
Does Gluu support the Dynamic Client Registration Protocol feature?
Gluu supports Dynamic Client Registration Protocol feature. Read more
Does Gluu support the Dynamic Client Registration Management Protocol feature?
Gluu supports Dynamic Client Registration Management Protocol feature. Read more
Does Gluu support the Refresh Token Rotation feature?
Gluu supports Refresh Token Rotation feature. Refresh tokens rotate on use; the refreshTokenExtendLifetimeOnRotation property controls whether lifetime extends on rotation. Read more
Does Gluu support the Refresh Token Rotation Grace Period feature?
Gluu does not support Refresh Token Rotation Grace Period feature.
Does Gluu support the OAuth 2.0 Demonstrating Proof of Possession (DPoP) feature?
Gluu supports OAuth 2.0 Demonstrating Proof of Possession (DPoP) feature. DPoP proof-of-possession at the application layer, including dpop_jkt authorization code binding and DPoP-Nonce replay mitigation. Read more
Does Gluu support the FAPI 1.0 Security Profile - Part 1: Baseline feature?
Gluu supports FAPI 1.0 Security Profile - Part 1: Baseline feature. Auth Server targets OpenID FAPI OpenID Provider conformance profiles. Read more
Compare with other providers
Note: The current data is based on provider documentation/experience and may not be 100% accurate. Please open an issue if you have spotted any inconsistencies.