Software

German ID Card based Authentication
We provide a Login Handler based on the Shibboleth main-stream Identity Provider as an extension.

This Java implementation can be used as Login-Handler wihtin Shibboleth.

The provided functionality enables you to establish business processes that require the use of the new German ID Card.
Access Control - Authorization Component
The Authorization Component, or GeoPDP, is a Java implementation of the OGC Standard GeoXACML 1.0 with Corrigendum You can obtain more information and a free evaluation at the GeoXACML homepage www.geoxacml.org

This Java implementation can be used as a Library or a Web Service.

The provided functionality enables to derive authorization decisions in a very flexible and fine-grained, geo-specific manner.

By using indexing of access rights, performance and skaling issues can be addressed.
Access Control - Enforcement Component
The Enforcement Component SDInterceptor is implemented as proposed by the XACML Standard. Please go to the download page to check for available demo modules.

The SDInterceptor checks a service specific request or response and queries an access decision from the Authorization Component in a standards based fashion.

The SDInterceptor module is implemented as Apache 2 Module which ensures skalability and extrem good performance.

The SDInterceptor for HTTP enables XACML / GeoXACML based access control for any Web Server request. The module will query XACML based authorization decisions from a given Policy Decision Point if the client GeoLocation (IP2Location) is turned off. If Ip2Location is activated, the module will query GeoXACML based authorization decisions from a given Geo Policy Decision Point.
The following SDInterceptor module for OGC Web Serivces are currently available:
- Web Map Service - all Versions
- Web Feature Service Transactional - all Versions
- Web Processing Service - all Versions
- Web 3D Service - (currently in the OGC standardization process)
The following SDInterceptor modules for OGC Web Serivces are currently under development:
- Web Coverage Service - all Versions