User Account and Authentication (UAA) is the identity and management service for Cloud Foundry.
XSUAA is an implementation of UAA service from SAP to be used with SAP Cloud Platform. It greatly extends capabilities for Cloud Foundry UAA service by providing additionally:
- service broker
- support for multitenancy
- API management functions
- Other SAP specific advantages to authentication and authorization in business applications
The library for Java is Open Source and available on Github.
The library for JavsScript is delivered via NPM and is not Open Source at the moment.
SAP Cloud SDK for Java has recently migrated its authentication flows from own implementation to a stable version of Java XSUAA library. This ensures full coverage of authentication methods available on SAP Cloud Platform with high level of security and ongoing updates provided by the underlying library. Initial support was introduced with version 3.16.1 of the Cloud SDK for Java.
- A short but great blog by Martin Blust about XSUAA and alike