Wren:AM

Wren:AM is an "all-in-one" access management solution providing strong and adaptive authentication, authorization, single sign-on (SSO), entitlements, federation and web services security.

Wren:AM provides mobile support out of the box, with full OAuth 2.0 and OpenID Connect (OIDC) support - modern protocols that provide the most efficient method for developing secure native or web-based mobile applications optimized for bandwidth and CPU.

Wren:AM is one of the projects in the Wren Security Suite, a community initiative that adopted open‐source projects formerly developed by ForgeRock, which has its own roots in Sun Microsystems’ products.

Contributions

Getting the Wren:AM

You can get Wren:AM Web Application Archive (WAR) in couple of ways:

Download binary release

The easiest way to get the Wren:AM is to download the latest binary release.

Build the source code

In order to build the project from the command line follow these steps:

Prepare your Environment

Following software is needed to build the project:

Software	Required Version
OpenJDK	17 and above
Git	2.0 and above
Maven	3.0 and above

Build the source code

All project dependencies are hosted in JFrog repository and managed by Maven, so to build the project simply execute Maven package goal.

$ cd $GIT_REPOSITORIES/wrenan
$ mvn clean package

Built binary can be found in ${GIT_REPOSITORIES}/wrenam/openam/openam-server/target/OpenAM-${VERSION}.war.

Docker image

You can also run Wren:AM in a Docker container. Official Wren:AM Docker images can be found here.

Documentation

Project documentation can be found in our documentation platform (docs.wrensecurity.org).

Documentation is still work in progress.

Acknowledgments

Wren:AM is standing on the shoulders of giants and is a continuation of a prior work:

• OpenSSO by Sun Microsystems
• OpenAM by ForgeRock AS

We'd like to thank them for supporting the idea of open-source software.

Disclaimer

Please note that the acknowledged parties are not affiliated with this project. Their trade names, product names and trademarks should not be used to refer to the Wren Security products, as it might be considered an unfair commercial practice.

Wren Security is open source and always will be.