pac4j is a Java security framework that provides authentication and authorization for web applications and web services. Secure your application with OpenID Connect (OIDC), CAS, SAML and other authentication mechanisms. Start with one of these Spring Boot examples:

• How to secure a Java client application with OIDC (using Spring Boot) OIDC
• How to secure a Java client application with CAS (using Spring Boot) CAS
• How to secure a Java client application with SAML (using Spring Boot) SAML

Choose an integration for your application. The guides below use OIDC, SAML or CAS to explain the framework-specific setup, including bridges for applications that already use Spring Security or Shiro:

• How to secure a Jakarta EE client application with OIDC (using pac4j) OIDC
• How to secure a Play client application with SAML (using pac4j) SAML
• How to secure a Spring Security client application with OIDC (using pac4j) OIDC
• How to secure a Shiro client application with CAS (using pac4j) CAS
• How to secure a Spring WebFlux client application with OIDC (using pac4j) OIDC
• How to secure a JAX-RS client application with OIDC (using pac4j) OIDC
• How to secure a Vert.x client application with CAS (using pac4j) CAS
• How to secure a Javalin client application with SAML (using pac4j) SAML
• How to secure a Spark Java client application with OIDC (using pac4j) OIDC
• How to secure an Undertow client application with OIDC (using pac4j) OIDC

The grand tour

For a more complete introduction to pac4j’s concepts and security model, follow the Grand tour below.