<commit_before>= Introduction
:page-sidebar: am_3_x_sidebar
:page-permalink: am/current/am_overview_introduction.html
:page-folder: am/overview
:page-toc: false
:page-layout: am

== Gravitee.io Access Management

Gravitee.io Access Management (AM) is a flexible, lightweight and easy to use open source Identity and Access Management solution.
It offers a centralized authentication and authorization service to deliver secure access for authorized users to your applications and APIs from any device.

== Authorization in AM

AM is based on OAuth2/OpenID Connect protocols and acts as an identity provider broker.

=== OAuth2

OAuth2 is an authorization framework that allows applications acting on behalf of the end user to obtain limited access to HTTP services.
link:https://tools.ietf.org/html/rfc6749[OAuth 2 RFC^] defines two endpoints:

- The *authorization endpoint* used to interact with the resource owner and obtain an authorization grant via user-agent redirection.
- The *token endpoint* used by the client to obtain an access token by presenting its authorization grant.

For further information about OAuth2, view the link:https://tools.ietf.org/html/rfc6749[RFC page^].

=== OpenID Connect

OpenID Connect is an identity layer on top of the OAuth 2.0 protocol.
It enables clients to verify the identity of the end user by using an Authorization Server to authenticate and obtain basic profile information about the end user.

For further information about OpenID Connect, see the link:http://openid.net/specs/openid-connect-core-1_0.html[OpenID Connect specifications^].<commit_msg>Added section about SAML in overview.<commit_after>= Introduction
:page-sidebar: am_3_x_sidebar
:page-permalink: am/current/am_overview_introduction.html
:page-folder: am/overview
:page-toc: false
:page-layout: am

== Gravitee.io Access Management

Gravitee.io Access Management (AM) is a flexible, lightweight and easy to use open source Identity and Access Management solution.
It offers a centralized authentication and authorization service to deliver secure access for authorized users to your applications and APIs from any device.

== Authorization in AM

AM is based on OAuth2/OpenID Connect and SAML 2.0 protocols and acts as an identity provider broker

=== OAuth2

OAuth2 is an authorization framework that allows applications acting on behalf of the end user to obtain limited access to HTTP services.
link:https://tools.ietf.org/html/rfc6749[OAuth 2 RFC^] defines two endpoints:

- The *authorization endpoint* used to interact with the resource owner and obtain an authorization grant via user-agent redirection.
- The *token endpoint* used by the client to obtain an access token by presenting its authorization grant.

For further information about OAuth2, view the link:https://tools.ietf.org/html/rfc6749[RFC page^].

=== OpenID Connect

OpenID Connect is an identity layer on top of the OAuth 2.0 protocol.
It enables clients to verify the identity of the end user by using an Authorization Server to authenticate and obtain basic profile information about the end user.

For further information about OpenID Connect, view the link:http://openid.net/specs/openid-connect-core-1_0.html[OpenID Connect specifications^].

=== SAML 2.0

The Security Assertion Markup Language (SAML) protocol is an open-standard, XML-based framework for authentication and authorization of users.

Gravitee AM can act as both SAML IdP for applications as well as federate with SAML based Identity Providers for protocol mediation.

For further information about SAML 2.0, view the link:http://docs.oasis-open.org/security/saml/Post2.0/sstc-saml-tech-overview-2.0.html[SAML Tech Overview 2.0]
{'fraction_non_alphanumeric': 0.061550976138828636, 'fraction_numerical': 0.013015184381778741, 'mean_word_length': 4.96925566343042, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 4, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '808966', 'n_tokens_mistral': 1018, 'n_tokens_neox': 952, 'n_words': 461}