WSO2 Identity Server Reviews

The best ever server which I used in my organization for identity solutions. It provides multiple identity solutions such as OAuth, OpenID, SSO, Provisioning, JIT, Multi-Factor Authentication, Fine-grained access control, SOAP and many more. The most likely feature is that you don't need to do any implementations as it has whatever you need for identity or authentication systems. You can integrate your authentication system with WSO2 identity server by doing some configurations in the GUI itself. For example, if you want OAuth to be implemented for your organization, just provide your callback URL, application name and that's it! It is that simple. It makes developers' life easier.

The major problem I am always having with WSO2 identity software is that they release latest versions of identity server and the java version differs for almost all the versions and hence it hard to find which version is it requiring. Therefore it is a bit hard to make the identity server runs for the first time. Further, to enable some specific feature, we should edit the configuration files in the installation folder of identity server.

The product opensource, adapts easily to changes, always incorporates new features, very easy to manage, there is a connector for many applications.
the self-service portal is a great help, and adaptive authentication allows you to configure your accesses in a granular way.
The support team is excellent

The module of reports is very light, the configuration of the authorization requires expertise, for small installations, the subscription model by processor is a bit expensive

It provides a good package of utilities and functionality. It also gives flexibility with the support formats.

Setup can be cumbersome. The Documentation assumes that the reader had a working knowledge of protocols and understanding of how authentication works for each protocol. There are not too many tools that assist in narrowing down issue when troubleshooting.

Open source provides the usual benefits, the systems scales well and supports our SSO needs for 10,000 plus users

There is a danger that you can over-customize the toolset and a note that upgrades have to be applied in succession you cannot jump to the latest version.

Easy to install, it has a lot of standards/default implementations features.

It's very difficult to set some non-default configuration options.
Documentation seems good for high level and general view, but fails in granular configurations.

Use of standard technologies makes integration with third party software
multiple-step authentication along Federation Authentication is awesome
OAuth and SAML are very easy to configure.
User provisioning features are very useful

XACML integration with API Manager requieres using of a sequence in API Manager. Could be improved as in a WSO2IS-KM installation APIS are already registered as service provider in IdentityServer. So XACML might be inegrated
more seamlessly.

1. Ease of Integration.
2. Time to provision is fast.
3. Easy to import APIs using swagger doc.
4. REST API available for forget password and other functionality.

1. Most of the User Management API are SOAP.
2. Spelling issues in logs generated by the software.
3. Failure issues not exposed in logs , eg. tried to use SMTP to send email but was failing with just a single error line. Better if exact error is highlighted.

It is very stable software which is mainly used to maintain the number of user and groups in enterprise level. Also offers the robust security to our solution. we have been using it from almost 5 years in our organization.

I do not have any reasons to mention about the least .

It is very user-friendly and provides all options to configure and manage users in the system. It also has a feature of SSO using Industry standards like SAML .Most of the features are already available so dont have to write custom methods

Improvements on the documentation can be made as it is not easy to read and implement changes

It allows to implement SSO using Industry standards like SAML, OpenID connect among others; Also it is perfect to protect your web assets using OAUTH2 and role/attributes based access control; It has capalities to federate authentication using virtually any identity providers out there like facebook, google, linkedin, salesforce and more; furthermore you can use your existing user stores to authenticate your users be LDAP, Active Directory or any JDBC compliant database; not to forget so many extension points it has, so if you can do Java code you can do almost everything with the product.

Documentation is still evolving, then sometimes is a little bit tricky to implement some sort of solutions.

This IDP supports almost every protocol available in the industry. (SAML, OIDC, OAuth etc). Provides multiple authentications via federated IDP which helps us to connect to a service easily via Facebook and Google developer APIs

Setting this up on a Windows machine is not easy. And the errors displayed are not very helpful. The user interface is very classic, where certain errors and validations are not properly handled

- Easy to use with Web GUI
- Open source
- They have good document and blog to explain concept.

- Not easy to advance configure you must have some skill to manage this issue
- Some configure you must to know their concept then you know how to configure it.

It is very easy to implement , adapt and debug

Online documents Support needs to improve

It is a very developer friendly software to use.

it has limited features added to it. Need to additional features like another software

1. Easy to configure
2. User friendly interface
3. Clear error description in terms of issues

1. In terms of time efficiency, the product can be improved.

Great features for IAM, multi trust and social login capabilities.

Some quirks regarding OAuth2 makes it difficult to integrate with some products.
Have had some troubles with SAML2 signing as well.

Very simple to install and configure.
It has lots of features. In less than 1 hour you can have an authetication platform. MFA is simple has 3 clicks to configure.

For more complicated things like clustering, integrating WSO2 authenticators with existing ones there is little or none documentation available. Free support is not enough.

Wso2 IS has most of the identity features like SSO, OpenID, Oauth, MFA, Social logins easy integration. Its 100% open source

For those who are new to wso2 product, documentation and example solutions are not sufficient to understand the configuration and integration of this product with their existing landscape. Minimal community support.