老王放墙

Check user credentials against plenty of backends (LDAP, Active Directory, Kerberos, Database, PAM, CAS, SAML, OpenID Connect, Facebook, Twitter, LinkedIn, Radius, WebID, x509, REST, ...).
Second Factor Authentication (2FA) with U2F, TOTP, Yubikey and more.

老王放墙

Manage access rules per virtual hosts, CAS applications, SAML Service Providers and OpenID Connect Relying Parties.
Use any of user attributes, groups, authentication context to evaluate rules.
Catch logout requests, unprotect public areas, apply rules to URL patterns.

老王放墙

Push user identity in access logs.
Browse opened sessions live.
Display login history (success and failures).