Jans
The Janssen Project is a home for open source IAM components, featuring Auth Server (OAuth/OpenID), Agama low-code identity orchestration, and the Cedarling policy decision point. The "Janssen Server" distributions bundle IAM components under one control plane.
Install / Use
/learn @JanssenProject/JansREADME
Welcome to the Janssen Project
Janssen is a self-funded project chartered directly under the Linux Foundation to foster the development of enterprise digital identity and access management infrastructure. As the lead Contributors, the Gluu team drives the priorities on a day-to-day basis, governed and guided by the Janssen community Technical Steering Committee.
There are several Janssen Components in different stages of development, from demos to stable releases. Janssen Project software has batteries included. You will find binaries, cloud-native deployment assets, documentation and more-- enabling you to build a product or mission-critical cybersecurity service with Janssen software.
If your enterprise needs Janssen for a production deployment, Gluu offers a commercial distribution of Janssen Project Components called Gluu Flex and Gluu Solo.
Get Help: Discussions | Chat
Docs: Documentation
Contribute: Contribution Guide | Community Docs | Developer Guides
Resources to learn more: Gluu Academy
Janssen Components
The table below lists components of the Janssen Project and their maturity stages.
| Component | Description | Lifecycle Stage |
|:---------------------------------------------|:--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|:-----------------------------------------------------------------|
| Jans Auth Server | A complete OAuth Authorization Server and a certified OpenID Connect Provider written in Java. It's the upstream open-source core of Gluu Flex. | |
| Agama | Agama offers an interoperable way to design authentication flows, coded in a DSL purpose-built for writing identity journeys. |
|
| Jans FIDO | Enables end-users to enroll and authenticate with passkeys and other FIDO authenticators. |
|
| Jans SCIM | SCIM JSON/REST API for user management, including associated FIDO devices. |
|
| Jans Config API | RESTful APIs manage configuration for all Janssen components. |
|
| Text UI ("TUI") | User interface accessible from command line. TUI is text-based interactive configuration tool that leverages config-API to configure Janssen Server modules |
|
| Jans CLI | Command line configuration tools to help you correctly call the Config API. |
|
| Jans Casa | Jans Casa is a self-service web portal for end-users to manage authentication and authorization preferences for their account in the Janssen Server |
|
| Jans Cedarling | Cedarling is an embeddable stateful Policy Decision Point for authorization requests. In simple terms, the Cedarling returns the answer: should the application allow this action on this resource given these JWT tokens. It is written in Rust with bindings to WASM, iOS, Android, and Python. |
|
| Jans Lock | An enterprise authorization solution featuring the Cedarling, a stateless PDP and the Lock Server which centralizes audit logs and configuration. |
|
| Janssen Tarp | An OpenID Connect RP test website that runs as a browser plugin in Chrome or Firefox. |
|
| Jans Chip | Sample iOS and Android mobile applications that implement the full OAuth and FIDO security stack for app integrity, client constrained access tokens, and user presence. |
|
| Jans LDAP Link | a group of components that provide synchronization services to update the Janssen User Store from an external authoritative LDAP data source |
|
Installation
You can install the Janssen federation stack in a Kubernetes cluster or as a single VM.
Development environments: Quick Start | Local K8S | VM install
Production deployments: [Amazon EKS](https://docs.jans.io
