Authentic 2’s documentation¶
Authentic 2 is a versatile identity provider addressing a broad range of needs, from simple to advanced setups, around web authentication, attribute sharing and namespace mapping.
Authentic 2 supports many protocols and standards, including SAML2, CAS, OpenID, LDAP, X509, OATH, and can bridge between them.
Authentic 2 is under the GNU AGPL version 3 licence.
It has support for SAMLv2 thanks to Lasso, a free (GNU GPL) implementation of the Liberty Alliance and OASIS specifications of SAML2, ID-FF1.2 and ID-WSF2.
The Documentation is under the licence Creative Commons CC BY-SA 2.0.
Documentation content¶
- Features
- Installation
- Deploy Authentic 2 in production
- Upgrading
- Specifying a different database
- General settings
- How do I configure the general settings ?
- Activate or deactivate debug mode
- Manage session cookie duration
- Time zone selection
- Activate or deactivate SSL authentication
- Activate or deactivate SAML2 authentication, Authentic 2 is a SAML2 service provider
- Activate or deactivate OpenID authentication, Authentic 2 is an OpenID relying party
- Activate or deactivate one-time password authentication
- Activate or deactivate Authentic 2 as a SAML2 identity provider
- Configure SAML2 keys
- Activate or deactivate Authentic 2 as an OpenID provider
- Activate or deactivate Authentic 2 as a CAS server
- Authentication with an existing LDAP directory
- Authentication on Authentic 2 with PAM
- How global policies are used in Authentic 2 administration
- Where do I find the Authentic 2 SAML2 metadata?
- Configure SAML 2.0 service providers
- Configure Authentic 2 as a SAML2 service provider or a SAML2 proxy
- Single Logout Management in Authentic 2
- Explanation
- How to know if a service provider supports the logout request?
- How to know if an identity provider supports the logout request?
- How activate the SLO?
- How deactivate the SLO?
- How refuse SLO from an identity provider?
- How refuse SLO from a service provider?
- How indicate identity providers to not forward logout request?
- How indicate service providers to not forward logout request?
- How do manage the SLO without closing the local session?
- How to create/import and delete in bulk SAML2 identity and service providers with the sync-metadata script?
- Configure Authentic 2 as a CAS server
- Attribute Management in Authentic 2
- Attribute management machinery explained (attribute_aggregator module)
- Attributes in session pushed by third SAML2 identity providers
- Consent Management in Authentic 2
Copyright¶
Authentic and Authentic 2 are copyrighted by Entr’ouvert and are licensed through the GNU AFFERO GENERAL PUBLIC LICENSE, version 3 or later. A copy of the whole license text is available in the COPYING file.
The OpenID IdP originates in the project django_openid_provider by Roman Barczyski, which is under the Apache 2.0 licence. This imply that you must distribute authentic2 under the AGPL3 licence when distributing this part of the project which is the only AGPL licence version compatible with the Apache 2.0 licence.
The Documentation is under the licence Creative Commons CC BY-SA 2.0.
