This is a very simple to use OAuth 2.0 client to connect your Gluu Server. It has minimal dependencies.

NOTE: You need to prepare your Gluu server before this package follow this for that. After this you need to insatll this package using composer.

Composer

Run the following to include this via Composer

composer require mrpvision/gluu

• Simplicity
• Works with PHP >= 5.6
• Minimal dependencies;
• Easy integration with your own application and/or framework;
• Does not enforce a framework on you;
• Support List, Create and Update Gluu Users.
• Support List, Create and Update Gluu Groups.

You MUST configure PHP in such a way that it enforces secure cookies! See this resource for more information.

The API is very simple to use. See the example/ folder for a working example!

It's clear this API must not be anonymously accessed, however the SCIM standard does not define a specific mechanism to prevent unauthorized requests to endpoints. In this regard there are just a few guidelines in section 2 of RFC 7644 concerned with authentication and authorization.

Gluu Server CE allows you to protect your endpoints with UMA (a profile of OAuth 2.0). This is a safe and standardized approach for controling access to web resources. For SCIM protection, we strongly recommend its usage.

Alternatively, for testing purposes (as well as learning) you can temporarily enable the test mode. In this "mode" most complexity is taken out of the way so it serves as a quick and easy way to start interacting with your service.

In the next section, we will work using test mode. The topic of UMA will be explored later on.

MIT.