forgerock Identity Management Solution Vs WSO2 Identity Server

Question

I'm trying to choose one of forgerock identity management solution (openAM, openIDM) and wso2 identity server for implementing Identity and Access Management solution.

I'm interested in using following features:

• Single Sign-On (SSO)
• Policy based access control
• Managing user identities
• Connecting to central repository like Active Directory, OpenLdap, Oracle Internet Directory etc.
• Etc..

Both open source products looks viable. I'm interested in having all of the above features along with good API to implement these features, along with active community support.

Which one would be the best amongst two ?

Thanks.

Answer 1

I am an architect from WSO2 - mostly leading WSO2 Identity Server. I am trying to be not bias as much as possible :-)

Both products bring you a comprehensive Identity Management platform - having support for SAML2, OpenID, XACML 3.0, OAuth 2.0, SCIM, WS-Security standards.

Few unique features that I would like to highlight on WSO2 Identity Server are...

1. Decentralized Federated SAML2 IdPs (http://blog.facilelogin.com/2012/08/security-patterns-decentralized.html)
2. Distributed XACML PDPs
3. User friendly XACML PAP wizard
4. High scalability (We have a middle-east customer using WSO2 IS over an user base of 4 million for OpenID support.)
5. Cassandra based User Store ( To be used over 800 Million user base by one of our production customers)
6. Light-weight and Very low memory footprint. The stripped down version of WSO2 IS can be started with 64MB Heap Size and the standard versions runs with 96MB Heap.
7. Highly extensible. The architecture behind WSO2 IS is highly extensible. You can easily plugin your authenticators, user store, etc...
8. Support for multi-tenancy.
9. Suport for multiple user stores (AD, LDAP, JDBC)
10. Interoperability.
11. Part of a proven SOA product platform provided by WSO2.

Also, we are planning to add support for OpenID Connect this year with a set of improved Identity Management capabilities.

You can also read more about WSO2 Identity Server from http://blog.facilelogin.com/2012/08/wso2-identity-server-flexible.html

You will not get an unbiased answer from me for your question :-) "Which one would be the best amongst two ?". You will aso get answers from Forgerock and other folks here. Best would be to evaluate and decide.