Apache Fortress

Apache Fortress

Developer(s)	Apache Software Foundation
Stable release	1.0.1 / July 22, 2016
Development status	Active
Written in	Java
Operating system	Cross-platform
Type	Access Control
License	Apache License 2.0
Website	http://directory.apache.org/fortress/

Apache Fortress is an open source project of the Apache Software Foundation and a subproject of the Apache Directory. It's a standards-based access management system, written in Java, that provides role-based access control, delegated administration and password policy services with LDAP.

Standards implemented:

• Role-Based Access Control (ANSI INCITS 359)
• Administrative Role-Based Access Control (ARBAC02)
• IETF Password Policy (draft)

Fortress has four separate components:

• Core - Java Access Management SDK
• Realm - Web Container security for Apache Tomcat
• Rest - HTTP protocol wrappers for the APIs
• Web - HTML pages for the APIs

History

Fortress was first contributed in 2011 to the OpenLDAP Foundation^[1] and moved to the Apache Directory project in 2014.^[2]

Releases

• 2.0.0-RC1 on 2016-11-07 (current release)
• 1.0.1 on 2016-07-22
• 1.0.0 on 2016-04-12
• 1.0-RC42 on 2016-03-19
• 1.0-RC40 on 2015-04-10

References

1. "Request for Contribution of Identity Access Management Software to OpenLDAP Project". OpenLDAP Foundation. 15 July 2011. Retrieved 20 April 2016.
2. "Notice to donate Fortress to the Apache Directory Project". Apache Software Foundation. 16 September 2014. Retrieved 20 April 2016.

External links

• Apache Fortress Project Page
• Apache Fortress on Open HUB
• Apache Directory Server Project Page
• Apache eases access management in Fortress 1.0
• Driving Security for ADF Essentials with Fortress
• A Model for Role Administration Using Organization Structure
• Federated RBAC: Fortress, OAuth2 (Oltu), JWT, Java EE, and JASPIC
• Openstack needs RBAC with Apache Fortress and IDM using Midpoint