ownCloud Delivers Secure Authentication and Authorization with the Integration of OAuth2

 Email This Post

Nuremberg, 8th Nov. 2017 — /BackupReview.info/ — The open industrial standard OAuth2 is now available for all ownCloud users. OAuth2 ensures a secure and simplified login process for ownCloud clients, as well as a significantly higher security level when embedding ownCloud into third party applications and web services. Due to the future integration, there is no need to store passwords in ownCloud desktop clients or ownCloud mobile apps for iOS and Android; the clients are instead authenticated in the automatically started web browser by entering a username and password. The corresponding client subsequently receives a unique access token, which together with the OAuth2 protocol, authorizes the login. The protocol is being used for all future connections to the ownCloud server. The ownCloud clients, as well as other third party web applications, will never see, nor store, the login credentials.

Video: ownCloud X Insights: OAuth2-Integration

The usage of different access tokens for each client allows users to end their sessions selectively. Because the access-token is generated for each device and each application individually, users can check their authorised clients in their personal settings and revoke individual tokens. This comes in handy, especially when a device has been lost. The user now has more control and can simultaneously raise the access security.

The server-sided authentication facilitates the integration of identity management services (z.B. SAML/SSO) because clients only need to be authenticated though the server. The integration of other authentication protocols, such as CAS, within ownCloud will also take place entirely on the server. The clients are independently authenticated by OAuth2.

This new development is the result of a community-project from a group of students at the University of Münster for the education-platform Sciebo@Learnweb. The goal was to have ownCloud integrated in the education-platform Moodle (https://pssl16.github.io/). The initial development was then adopted by ownCloud developers and further developed for professional use.

OAuth2 is Available for the Following Platforms From Now On or Coming Soon:

• OAuth2 v0.2 server-side (needs minimum ownCloud Server 10.0.3) is available on the ownCloud Marketplace (https://marketplace.owncloud.com/apps/oauth2)
• ownCloud Android App 2.5.0 with OAuth2-Support is available in the PlayStore (https://play.google.com/store/apps/details?id=com.owncloud.android )
• ownCloud iOS App 3.7.0 with OAuth2-Support is planned to release in the beginning of November 2017
• ownCloud Desktop client 2.4.0 with OAuth2-Support, is planned for the beginning of November 2017. The Alpha Version already available (https://central.owncloud.org/t/desktop-client-2-4-0-alpha1-released/9837 )

Overview on the Secure Authentication and Authorisation Process with OAuth2 using the ownCloud Desktop Clients:

1. The user opens the newly installed desktop-client and calls the ownCloud-address (URL).
2. In the browser the user opens the login page. The authenticity of the login page can be verified by the user with the regular browser features.
3. Now the login credentials can be entered (authentication) and the application is authorised.
4. The ownCloud Server transmits the individual tokens (access & refresh) to the client.
5. The client is now completely authorised and ready.

About ownCloud
Organizations that must share confidential data internally and externally rely on ownCloud’s on premises enterprise Universal File Access platform. Only ownCloud gives IT the visibility and control required to manage sensitive data, preserve business processes, and integrate with existing compliant infrastructures while offering users the modern collaboration experience they demand. This is made possible through ownCloud’s open, modular architecture, extreme extensibility and unique federated cloud sharing capabilities. For more information, visit: https://owncloud.com

Contact:
ownCloud
info@owncloud.com
Phone +49 911 14888690
Fax +49 911 4186451
www.owncloud.com

Address:
ownCloud GmbH
Leipziger Platz 21
90491 Nürnberg
Germany

Source: ownCloud

Tags: ownCloud