obiba/agate

Manage users with Agate

Central user profile, authentication and 2FA server for the OBiBa applications.

DocumentationGitHubDemo

What is Agate?

Agate provides user services to the OBiBa software stack: authentication, user profile management and notifications, for the declared applications such as Opal and Mica.

Agate aims to be a lightweight but highly secure central authentication server: simple to install, administer and integrate with OBiBa applications.

From Agate, an administrator manages users, groups and applications

Features

Applications. Declared applications use Agate as their user registry and notification service. Each application authenticates with a secret key (see each application’s documentation to register one). An identified application can authenticate a user, get their profile, and email all users or a group of users with access to it.

Groups. Users can belong to one or more groups. Application access can be granted per group: members inherit the group’s application access.

Users. A user is authenticated and receives notification emails. A user can be added by an Agate administrator, or submit a join request from the Agate web interface or the Mica sign-up page (protected by Google reCAPTCHA). Users manage their personal information from Agate or from their Mica profile page. Passwords (first password and recovery) are handled by email between the user and Agate, with no administrator action.

Email templates. Notifications are HTML templates, so you can fully customize links, style and site policies.

Administration.

  • Extend user profile attributes (applied to the join request form).
  • Manage users, groups and applications.
  • Manage user sessions: timeouts and activity tracking.

Download

Agate is a stand-alone Java web server application; it does not need a container such as Tomcat or Jetty. The Debian and RPM packages are strongly recommended, as they greatly simplify installation and upgrades.

See the installation guide and the configuration guide.

Try Agate

Have a look at the demo site.

Administration pages:

  • Administrator: administrator / password

Own user profile:

  • Mica content editor: editor / P@ssw0rd
  • Mica content reviewer: reviewer / P@ssw0rd
  • Mica data access officer: dao / P@ssw0rd
  • Mica regular user: user1 / P@ssw0rd

Agate releases