I'm looking to emulate a small subset of the behavior of an authentication system our client uses. The real system is not available for us to run in our development environment, and the subset we need is small.
The features we need to emulate are:
- A proxy server
- Maintaining a database of users
- Authenticating users
- Forwarding an authenticated user's ID to our application (behind the proxy) via a header with a particular name
For our internal usage in emulating this, I am also looking for the following:
- Creation and management of users through a web interface
- Runs on Windows or Linux
Bonus points if an external user can request an account and then have another user approve it. (This would be useful for training purposes.) More bonus points if it can do that and a single person (who I imagine would be identified as some kind of admin in the system) can easily just force create a few users (for our testing) through the web interface.
I do not expect we will put a heavy load on the system, so scale is not really a concern. It's also fine if a combination of tools will suit our needs (like Apache plus a module or something).
Trying to search for this odd set of requirements did not turn up obvious solutions.