PicketLink

PicketLink implements basic security filters for dealing with basic operations in many Java applications.

PicketLink has a codebase centered around user authentication, authorization and sessions handling, being a powerful enterprise-level tool for dealing with identity management in a Web app.

The base module provides the integration framework required to use PicketLink within a Java EE application. The rest of the functionality can be added as extra modules.

What is new in this release:

• Use of Apache Deltaspike v1.0.0
• PicketLink Uber Jar (One Single Jar as dependency)
• JSON based security tokens using JWT and JWE Specifications
• Configuration API
• Improvements of SAML Support

What is new in version 2.7.0:

• Use of Apache Deltaspike v1.0.0
• PicketLink Uber Jar (One Single Jar as dependency)
• JSON based security tokens using JWT and JWE Specifications
• Configuration API
• Improvements of SAML Support

What is new in version 2.1.3:

• JPA Based Token Registry
• SAML Parsing should be tolerant of non-standard extensions
• IDPWebBroserSSOValve should use the PicketLinkSTS configuration parsed from picketlink.xml
• IDPWebBroserSSOValve attributes should be removed. All the configuration must be done in picketlink.xml.
• PicketLink STS should use the picketlink.xml file to load the configurations.
• PicketLink Audit
• SAML Authenticators that work on Apache Tomcat 7
• [BaseFormAuthenticator] Move the LogOutPage attribute to the SPType

What is new in version 2.1.2:

• Removing signature related options from valves in quickstart applications
• Using of Issuer of SP as value of Audience
• Make IdentityServer.STACK to be static class
• Using GMT Timezone in SAML messages format
• Support for SP metadata on IDP side

What is new in version 2.0.2:

• IDP and SP web applications can get the authenticator settings from jboss-web.xml
• SAML2 parsing now allows the use of EncryptedID.
• Brand new SAML Metadata Configuration providers. Currently all file based.
• LogOut Page URL is configurable at the Service Provider.