Gluu provides identity and access management (IAM) for enterprises, built on open source. Its main product, Gluu Flex, offers OAuth-based identity for people and workloads, issues JWT tokens and publishes keys. It connects to Cedarling, an open source, embeddable policy decision point for authorisation. The upstream codebase, the Janssen Project, is hosted at the Linux Foundation, and the Gluu team is its lead contributor. Organisations can run the infrastructure themselves or outsource operation to Gluu, for example through the hosted Gluu Solo offering.
Gluu, Inc. is headquartered in Austin, Texas, in the United States, and describes itself as employee-owned. Because the vendor is US-based, a service hosted by Gluu falls under US jurisdiction, including the CLOUD Act. As the core is open source, a European organisation can also install the software on infrastructure of its own choosing, keeping data and keys under its own control. The vendor's website does not say whether a hosted variant is available in the EU.