You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@syncope.apache.org by il...@apache.org on 2020/03/15 15:48:05 UTC

[syncope] branch SYNCOPE-1545 updated (b732d00 -> eba1928)

This is an automated email from the ASF dual-hosted git repository.

ilgrosso pushed a change to branch SYNCOPE-1545
in repository https://gitbox.apache.org/repos/asf/syncope.git.


 discard b732d00  add AUP support; off by default
 discard 51468cf  wip: fix ci build
 discard 03040c2  fix test
 discard e4f8002  add support for syncope authn disable missing service param
 discard 783482e  fix copyright header
 discard 9b7ff8f  - move config to configuration class - add support for restful registry with entity-mapping - add support for config validation
 discard 4eaac9d  Exclusions
 discard b58d877  Refactoring logging, adding Keymaster support + Docker image
 discard b45da06  Fix checkstyle
 discard 2000264  Upgrading Jackson and java-uuid-generator
 discard b3d46e4  fit/wa-reference + inclusion in standalone
 discard ce3dd6b  Fixing checkstyle
 discard c5453ca  Basic white-labeling
 discard 85c63a1  Restoring bootstrap
 discard 730163e  clean up module versions
 discard 8ab5379  remove misc modules
 discard 1ffb700  Merge branch 'SYNCOPE-1545' of github.com:apache/syncope into SYNCOPE-1545
 discard 52c22f3  minor fixes
 discard 5fb7ef6  Now skipping maven-remote-resources-plugin by default
 discard de75670  Skipping maven-remote-resources-plugin by default, keeping it enabled in the apache-release profile; for SNAPSHOT publishing we'll need to add -Dskip.maven-remote-resources-plugin=false
 discard 19b3421  [SYNCOPE-1545] Initial
     add ab87978  Upgrading Jackson and java-uuid-generator
     add 7ad0b24  Upgrading Spring Cloud Gateway, Spring Security and Elasticsearch
     add 475e5f9  [SYNCOPE-1546] Ensuring rejected propagation tasks are stored if configured + adding report metrics for asyncConnectorExecutor and asyncConnectorExecutor
     add 6bc5431  Fixing missing JobActionPanel for SchedTaskDirectoryPanel
     add 33d67ae  Fixing 'view executions' menu items for Sched, Pull and Push tasks
     add bbfd805  Upgrading build-helper-maven-plugin and asciidoctorj-pdf
     add 479710f  [SYNCOPE-1547] customize the roles to be displayed
     add 60cc70c  Upgrading maven-site-plugin
     add 1c7349d  [SYNCOPE-1547] customize the roles to be displayed
     add 195f072  Upgrading maven-dependency-plugin
     add d71584b  Upgrading cargo-maven2-plugin and Mockito
     add 37f44bf  [SYNCOPE-1531] Better busy management for CSV export
     add 65fbd6f  Upgrading Groovy
     new 596f679  [SYNCOPE-1545] Initial
     new abfd62a  [SYNCOPE-1545] Basic white-labeling
     new dd5bed6  [SYNCOPE-1545] fit/wa-reference + inclusion in standalone
     new 37251ff  [SYNCOPE-1545] Refactoring logging, adding Keymaster support + Docker image
     new 2a5f196  [SYNCOPE-1545] move config to configuration class, add support for restful registry with entity-mapping and add support for config validation
     new 1c79728  [SYNCOPE-1545] add support for syncope authn and disable missing service param
     new eba1928  [SYNCOPE-1545] add AUP support; off by default

This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version.  This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:

 * -- * -- B -- O -- O -- O   (b732d00)
            \
             N -- N -- N   refs/heads/SYNCOPE-1545 (eba1928)

You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.

Any revisions marked "omit" are not gone; other references still
refer to them.  Any revisions marked "discard" are gone forever.

The 7 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 .travis.yml                                        |  9 +-
 ...AnyDirectoryPanelAdditionalActionsProvider.java | 25 +++---
 .../console/wizards/CSVPushWizardBuilder.java      | 16 +++-
 .../client/ui/commons/HttpResourceStream.java      | 44 +++-------
 .../ResponseHolder.java}                           | 51 +++---------
 .../client/ui/commons/wizards/AjaxWizard.java      | 97 +++++++++++-----------
 .../ui/commons/wizards/AjaxWizardBuilder.java      | 19 +++--
 .../client/console/SerializableSupplier.java       | 26 ------
 .../syncope/client/console/pages/BasePage.java     |  5 +-
 .../console/reports/ReportExecutionDetails.java    | 21 ++---
 .../tasks/ProvisioningTaskDirectoryPanel.java      |  7 +-
 .../console/tasks/SchedTaskDirectoryPanel.java     | 64 ++++++++++++--
 .../wicket/ajax/form/AjaxDownloadBehavior.java     | 19 ++---
 .../wicket/markup/html/form/BinaryFieldPanel.java  |  3 +-
 .../wicket/markup/html/link/VeilPopupSettings.java |  3 +-
 .../syncope/client/console/widgets/JobWidget.java  | 29 +++++--
 .../syncope/client/console/wizards/any/Roles.java  | 18 ++--
 .../enduser/markup/html/form/BinaryFieldPanel.java |  4 +-
 .../enduser/wizards/any/AnyWizardBuilder.java      |  5 +-
 .../client/lib/SyncopeClientFactoryBean.java       |  1 +
 .../syncope/common/lib/info/NumbersInfo.java       | 91 ++++++++++++++++++++
 .../apache/syncope/core/logic/SyncopeLogic.java    | 48 +++++++++++
 .../org/apache/syncope/core/logic/TaskLogic.java   |  3 +-
 .../core/provisioning/api/jexl/JexlUtils.java      |  2 +-
 .../api/propagation/PropagationTaskCallable.java   |  2 +
 .../api/propagation/PropagationTaskExecutor.java   | 13 +--
 .../provisioning/java/ProvisioningContext.java     | 45 +++++-----
 .../core/provisioning/java/VirAttrHandlerImpl.java |  2 +-
 .../AbstractPropagationTaskExecutor.java           | 69 +++++++++++----
 .../DefaultPropagationTaskCallable.java            | 35 ++++----
 .../PriorityPropagationTaskExecutor.java           | 96 +++++++++------------
 .../src/main/resources/provisioning.properties     |  4 +-
 .../main/resources/provisioning.properties.mariadb |  4 +-
 .../main/resources/provisioning.properties.mssql   |  4 +-
 .../main/resources/provisioning.properties.myjson  |  4 +-
 .../main/resources/provisioning.properties.mysql   |  4 +-
 .../main/resources/provisioning.properties.pgjsonb |  4 +-
 .../resources/provisioning.properties.postgresql   |  4 +-
 .../src/main/resources/provisioning.properties     |  4 +-
 .../client/console/panels/SAML2SPPanel.java        |  5 +-
 .../src/main/resources/all/provisioning.properties |  4 +-
 .../main/resources/application-embedded.properties |  4 +-
 .../main/resources/mariadb/provisioning.properties |  4 +-
 .../main/resources/myjson/provisioning.properties  |  7 +-
 .../main/resources/mysql/provisioning.properties   |  4 +-
 .../main/resources/oracle/provisioning.properties  |  4 +-
 .../main/resources/pgjsonb/provisioning.properties |  4 +-
 .../resources/postgres/provisioning.properties     |  4 +-
 .../src/main/resources/provisioning.properties     |  4 +-
 .../resources/sqlserver/provisioning.properties    |  4 +-
 pom.xml                                            | 11 ++-
 wa/pom.xml                                         |  5 +-
 .../syncope/wa/config/SyncopeWAConfiguration.java  | 11 +--
 53 files changed, 583 insertions(+), 396 deletions(-)
 copy client/idrepo/common-ui/src/main/java/org/apache/syncope/client/ui/commons/{HttpResourceStream.java => rest/ResponseHolder.java} (59%)
 delete mode 100644 client/idrepo/console/src/main/java/org/apache/syncope/client/console/SerializableSupplier.java


[syncope] 05/07: [SYNCOPE-1545] move config to configuration class, add support for restful registry with entity-mapping and add support for config validation

Posted by il...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

ilgrosso pushed a commit to branch SYNCOPE-1545
in repository https://gitbox.apache.org/repos/asf/syncope.git

commit 2a5f196b842719c15b4d7855d6c9106e3448ab19
Author: Misagh Moayyed <mm...@gmail.com>
AuthorDate: Mon Mar 9 16:37:19 2020 +0330

    [SYNCOPE-1545] move config to configuration class, add support for restful registry with entity-mapping and add support for config validation
---
 wa/pom.xml                                         |  4 ++
 .../apache/syncope/wa/SyncopeWAApplication.java    | 24 ++++-------
 .../syncope/wa/config/SyncopeWAConfiguration.java  | 49 ++++++++++++++++++++++
 wa/src/main/resources/META-INF/spring.factories    | 17 ++++++++
 4 files changed, 79 insertions(+), 15 deletions(-)

diff --git a/wa/pom.xml b/wa/pom.xml
index 13d69aa..09d2fa2 100644
--- a/wa/pom.xml
+++ b/wa/pom.xml
@@ -165,6 +165,10 @@ under the License.
     </dependency>
     <dependency>
       <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-support-rest-service-registry</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
       <artifactId>cas-server-webapp-config</artifactId>
     </dependency>
     <dependency>
diff --git a/wa/src/main/java/org/apache/syncope/wa/SyncopeWAApplication.java b/wa/src/main/java/org/apache/syncope/wa/SyncopeWAApplication.java
index 16d985d..dac26bb 100644
--- a/wa/src/main/java/org/apache/syncope/wa/SyncopeWAApplication.java
+++ b/wa/src/main/java/org/apache/syncope/wa/SyncopeWAApplication.java
@@ -18,13 +18,12 @@
  */
 package org.apache.syncope.wa;
 
-import org.apache.commons.lang.StringUtils;
-import org.apache.syncope.common.keymaster.client.api.model.NetworkService;
-import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStart;
-import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStop;
 import org.apereo.cas.configuration.CasConfigurationProperties;
+import org.apereo.cas.configuration.CasConfigurationPropertiesValidator;
 import org.apereo.cas.util.AsciiArtUtils;
 import org.apereo.cas.util.DateTimeUtils;
+
+import org.apache.commons.lang.StringUtils;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
@@ -44,7 +43,6 @@ import org.springframework.boot.builder.SpringApplicationBuilder;
 import org.springframework.boot.context.event.ApplicationReadyEvent;
 import org.springframework.boot.context.properties.EnableConfigurationProperties;
 import org.springframework.boot.web.servlet.support.SpringBootServletInitializer;
-import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.EnableAspectJAutoProxy;
 import org.springframework.context.annotation.PropertySource;
 import org.springframework.context.event.EventListener;
@@ -88,17 +86,13 @@ public class SyncopeWAApplication extends SpringBootServletInitializer {
      */
     @EventListener
     public void handleApplicationReadyEvent(final ApplicationReadyEvent event) {
+        if (!Boolean.getBoolean("SKIP_CONFIG_VALIDATION")) {
+            CasConfigurationPropertiesValidator validator =
+                new CasConfigurationPropertiesValidator(event.getApplicationContext());
+            validator.validate();
+        }
+
         AsciiArtUtils.printAsciiArtReady(LOG, StringUtils.EMPTY);
         LOG.info("Ready to process requests @ [{}]", DateTimeUtils.zonedDateTimeOf(event.getTimestamp()));
     }
-
-    @Bean
-    public KeymasterStart keymasterStart() {
-        return new KeymasterStart(NetworkService.Type.WA);
-    }
-
-    @Bean
-    public KeymasterStop keymasterStop() {
-        return new KeymasterStop(NetworkService.Type.WA);
-    }
 }
diff --git a/wa/src/main/java/org/apache/syncope/wa/config/SyncopeWAConfiguration.java b/wa/src/main/java/org/apache/syncope/wa/config/SyncopeWAConfiguration.java
new file mode 100644
index 0000000..2107f51
--- /dev/null
+++ b/wa/src/main/java/org/apache/syncope/wa/config/SyncopeWAConfiguration.java
@@ -0,0 +1,49 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *    http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ *
+ */
+
+package org.apache.syncope.wa.config;
+
+import org.apereo.cas.services.DefaultRegisteredServiceEntityMapper;
+import org.apereo.cas.services.RegisteredServiceEntityMapper;
+
+import org.apache.syncope.common.keymaster.client.api.model.NetworkService;
+import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStart;
+import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStop;
+import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+@Configuration(proxyBeanMethods = false)
+public class SyncopeWAConfiguration {
+    @Bean
+    @ConditionalOnProperty(name = "cas.serviceRegistry.rest.url")
+    public RegisteredServiceEntityMapper registeredServiceEntityMapper() {
+        return new DefaultRegisteredServiceEntityMapper();
+    }
+
+    @Bean
+    public KeymasterStart keymasterStart() {
+        return new KeymasterStart(NetworkService.Type.WA);
+    }
+
+    @Bean
+    public KeymasterStop keymasterStop() {
+        return new KeymasterStop(NetworkService.Type.WA);
+    }
+}
diff --git a/wa/src/main/resources/META-INF/spring.factories b/wa/src/main/resources/META-INF/spring.factories
new file mode 100644
index 0000000..db54cd0
--- /dev/null
+++ b/wa/src/main/resources/META-INF/spring.factories
@@ -0,0 +1,17 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+org.springframework.boot.autoconfigure.EnableAutoConfiguration=org.apache.syncope.wa.config.SyncopeWAConfiguration


[syncope] 06/07: [SYNCOPE-1545] add support for syncope authn and disable missing service param

Posted by il...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

ilgrosso pushed a commit to branch SYNCOPE-1545
in repository https://gitbox.apache.org/repos/asf/syncope.git

commit 1c7972836cb45fa42c5278c6e67c3b7a43fd1a8a
Author: Misagh Moayyed <mm...@gmail.com>
AuthorDate: Thu Mar 12 16:57:17 2020 +0330

    [SYNCOPE-1545] add support for syncope authn and disable missing service param
---
 .travis.yml                                               | 7 +++----
 wa/pom.xml                                                | 5 +++++
 wa/src/main/resources/wa.properties                       | 4 ++++
 wa/src/test/java/org/apache/syncope/wa/SyncopeWATest.java | 3 ++-
 4 files changed, 14 insertions(+), 5 deletions(-)

diff --git a/.travis.yml b/.travis.yml
index e2597fb..0ed30c8 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -28,6 +28,9 @@ git:
 env:
   global:
   - MAVEN_OPTS="-Xmx4096M -Xss128M -XX:+CMSClassUnloadingEnabled -XX:+TieredCompilation -XX:TieredStopAtLevel=1 -noverify"
+  - JAVAEE_CONTAINER=Tomcat
+  - DBMS=H2
+  - jaxrsContentType=application/json
 install: true
 notifications:
   email:
@@ -53,10 +56,6 @@ jobs:
       ######################################################
     - stage: fit
       name: "Full Integration Tests: Apache Tomcat / H2 / JSON Content-Type"
-      env:
-       - JAVAEE_CONTAINER=Tomcat
-       - DBMS=H2
-       - jaxrsContentType=application/json
       script: travis_wait 55 mvn -f fit/core-reference/pom.xml verify -Dinvoker.streamLogs=true -Dmodernizer.skip=true -Dianal.skip=true -Drat.skip=true -Dcheckstyle.skip=true -Djacoco.skip=true
       after_failure:
        - cat fit/core-reference/target/log/*
diff --git a/wa/pom.xml b/wa/pom.xml
index 09d2fa2..85cff67 100644
--- a/wa/pom.xml
+++ b/wa/pom.xml
@@ -132,6 +132,11 @@ under the License.
       <artifactId>cas-server-support-reports</artifactId>
     </dependency>
     <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-syncope-authentication</artifactId>
+        <scope>compile</scope>
+    </dependency>
+    <dependency>
       <groupId>org.apereo.cas</groupId>
       <artifactId>cas-server-support-saml</artifactId>
     </dependency>
diff --git a/wa/src/main/resources/wa.properties b/wa/src/main/resources/wa.properties
index a208075..14e07af 100644
--- a/wa/src/main/resources/wa.properties
+++ b/wa/src/main/resources/wa.properties
@@ -23,3 +23,7 @@ useGZIPCompression=true
 conf.directory=${conf.directory}
 cas.standalone.configurationDirectory=${conf.directory}
 cas.authn.oidc.jwksFile=file:${conf.directory}/oidc.keystore
+
+# Disable access to the login endpoint
+# if no target application is specified.
+cas.sso.allow-missing-service-parameter=false
diff --git a/wa/src/test/java/org/apache/syncope/wa/SyncopeWATest.java b/wa/src/test/java/org/apache/syncope/wa/SyncopeWATest.java
index c4ed578..d504cc8 100644
--- a/wa/src/test/java/org/apache/syncope/wa/SyncopeWATest.java
+++ b/wa/src/test/java/org/apache/syncope/wa/SyncopeWATest.java
@@ -49,7 +49,8 @@ import org.springframework.boot.web.server.LocalServerPort;
 import org.springframework.test.context.ContextConfiguration;
 
 @SpringBootTest(webEnvironment = SpringBootTest.WebEnvironment.RANDOM_PORT, properties = {
-    "cas.authn.accept.users=mrossi::password"
+    "cas.authn.accept.users=mrossi::password",
+    "cas.sso.allow-missing-service-parameter=true"
 })
 @ContextConfiguration(initializers = ZookeeperTestingServer.class)
 public class SyncopeWATest {


[syncope] 04/07: [SYNCOPE-1545] Refactoring logging, adding Keymaster support + Docker image

Posted by il...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

ilgrosso pushed a commit to branch SYNCOPE-1545
in repository https://gitbox.apache.org/repos/asf/syncope.git

commit 37251ffb31db59c23b783840d9ce1aeb39d500f7
Author: Francesco Chicchiriccò <il...@apache.org>
AuthorDate: Wed Mar 4 16:15:16 2020 +0100

    [SYNCOPE-1545] Refactoring logging, adding Keymaster support + Docker image
---
 .../client/console/SyncopeConsoleApplication.java  |  15 +-
 .../client/console/SyncopeWebApplication.java      |  20 --
 .../client/enduser/SyncopeEnduserApplication.java  |  13 ++
 .../client/enduser/SyncopeWebApplication.java      |  15 --
 common/keymaster/client-api/pom.xml                |   5 +
 .../client/api/startstop/KeymasterStart.java       |  11 +-
 .../client/api/startstop/KeymasterStartStop.java   |  12 +-
 .../client/api/startstop/KeymasterStop.java        |  14 +-
 .../core/starter/SyncopeCoreApplication.java       |  12 ++
 ...ncopeCoreStartup.java => SyncopeCoreStart.java} |  12 +-
 docker/core/src/main/resources/log4j2.xml          |   4 +
 docker/pom.xml                                     |  16 +-
 .../docker-compose/docker-compose-all.yml          |  18 +-
 docker/wa/LICENSE                                  | 202 +++++++++++++++++++++
 docker/wa/NOTICE                                   |   5 +
 docker/wa/pom.xml                                  | 177 ++++++++++++++++++
 .../wa/src/main/resources/Dockerfile               |  35 ++--
 .../wa}/src/main/resources/application.properties  |   2 +-
 .../wa/src/main/resources/keymaster.properties     |  27 +--
 docker/wa/src/main/resources/log4j2.xml            |  59 ++++++
 .../wa/src/main/resources/startup.sh               |  28 +--
 .../wa/src/main/resources/wa.properties            |  21 +--
 .../syncope/core/logic/NetworkServiceLogic.java    |   6 +-
 fit/console-reference/pom.xml                      |   5 -
 fit/enduser-reference/pom.xml                      |   5 -
 fit/wa-reference/pom.xml                           | 159 +++++++++++++++-
 .../src/main/resources/keymaster.properties        |  27 +--
 fit/wa-reference/src/main/resources/log4j2.xml     | 148 +++++----------
 .../wa-reference/src/main/resources/wa.properties  |  21 +--
 .../src/test/resources/hotswap-agent.properties    |  25 +--
 sra/pom.xml                                        |   6 +
 .../apache/syncope/sra/SyncopeSRAApplication.java  |  13 ++
 .../org/apache/syncope/sra/SyncopeSRAShutdown.java |  33 ----
 .../apache/syncope/sra/SyncopeSRAStartStop.java    |  40 ----
 wa/pom.xml                                         | 133 +++++++++++++-
 .../apache/syncope/wa/SyncopeWAApplication.java    |  17 ++
 wa/src/main/resources/application.properties       |   8 +-
 wa/src/main/resources/log4j2.xml                   |  68 +++++++
 wa/src/main/resources/static/images/favicon.png    | Bin 0 -> 641 bytes
 wa/src/main/resources/templates/layout.html        |   4 +-
 .../{application.properties => wa.properties}      |  21 +--
 .../java/org/apache/syncope/wa/SyncopeWATest.java  | 158 ++++++++++++++++
 .../apache/syncope/wa/ZookeeperTestingServer.java  |  80 ++++++++
 .../resources/keymaster.properties}                |  27 +--
 44 files changed, 1255 insertions(+), 472 deletions(-)

diff --git a/client/idrepo/console/src/main/java/org/apache/syncope/client/console/SyncopeConsoleApplication.java b/client/idrepo/console/src/main/java/org/apache/syncope/client/console/SyncopeConsoleApplication.java
index 0175fe7..8e922cc 100644
--- a/client/idrepo/console/src/main/java/org/apache/syncope/client/console/SyncopeConsoleApplication.java
+++ b/client/idrepo/console/src/main/java/org/apache/syncope/client/console/SyncopeConsoleApplication.java
@@ -19,6 +19,7 @@
 package org.apache.syncope.client.console;
 
 import com.giffing.wicket.spring.boot.starter.web.config.WicketWebInitializerAutoConfig.WebSocketWicketWebInitializerAutoConfiguration;
+import org.apache.syncope.client.console.commons.AnyDirectoryPanelAdditionalActionLinksProvider;
 import org.apache.syncope.client.console.commons.AnyDirectoryPanelAdditionalActionsProvider;
 import org.apache.syncope.client.console.commons.AnyWizardBuilderAdditionalSteps;
 import org.apache.syncope.client.console.commons.ExternalResourceProvider;
@@ -36,6 +37,9 @@ import org.apache.syncope.client.console.commons.StatusProvider;
 import org.apache.syncope.client.console.commons.VirSchemaDetailsPanelProvider;
 import org.apache.syncope.client.console.init.ClassPathScanImplementationLookup;
 import org.apache.syncope.client.console.init.MIMETypesLoader;
+import org.apache.syncope.common.keymaster.client.api.model.NetworkService;
+import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStart;
+import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStop;
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean;
@@ -44,7 +48,6 @@ import org.springframework.boot.autoconfigure.web.servlet.error.ErrorMvcAutoConf
 import org.springframework.boot.builder.SpringApplicationBuilder;
 import org.springframework.boot.web.servlet.support.SpringBootServletInitializer;
 import org.springframework.context.annotation.Bean;
-import org.apache.syncope.client.console.commons.AnyDirectoryPanelAdditionalActionLinksProvider;
 
 @SpringBootApplication(exclude = {
     ErrorMvcAutoConfiguration.class,
@@ -61,6 +64,16 @@ public class SyncopeConsoleApplication extends SpringBootServletInitializer {
         return super.configure(builder);
     }
 
+    @Bean
+    public KeymasterStart keymasterStart() {
+        return new KeymasterStart(NetworkService.Type.CONSOLE);
+    }
+
+    @Bean
+    public KeymasterStop keymasterStop() {
+        return new KeymasterStop(NetworkService.Type.CONSOLE);
+    }
+
     @ConditionalOnMissingBean(name = "classPathScanImplementationLookup")
     @Bean
     public ClassPathScanImplementationLookup classPathScanImplementationLookup() {
diff --git a/client/idrepo/console/src/main/java/org/apache/syncope/client/console/SyncopeWebApplication.java b/client/idrepo/console/src/main/java/org/apache/syncope/client/console/SyncopeWebApplication.java
index bc01e4d..e015d03 100644
--- a/client/idrepo/console/src/main/java/org/apache/syncope/client/console/SyncopeWebApplication.java
+++ b/client/idrepo/console/src/main/java/org/apache/syncope/client/console/SyncopeWebApplication.java
@@ -76,7 +76,6 @@ import org.apache.wicket.request.component.IRequestablePage;
 import org.apache.wicket.request.cycle.IRequestCycleListener;
 import org.apache.wicket.request.mapper.parameter.PageParameters;
 import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.beans.factory.annotation.Value;
 import org.springframework.stereotype.Component;
 
 @Component
@@ -100,9 +99,6 @@ public class SyncopeWebApplication extends WicketBootSecuredWebApplication {
     @Autowired
     private ServiceOps serviceOps;
 
-    @Value("${service.discovery.address}")
-    private String address;
-
     private String anonymousUser;
 
     private String anonymousKey;
@@ -179,13 +175,6 @@ public class SyncopeWebApplication extends WicketBootSecuredWebApplication {
         }
     }
 
-    private NetworkService getNetworkService() {
-        NetworkService ns = new NetworkService();
-        ns.setType(NetworkService.Type.CONSOLE);
-        ns.setAddress(address);
-        return ns;
-    }
-
     @Override
     protected void init() {
         super.init();
@@ -311,15 +300,6 @@ public class SyncopeWebApplication extends WicketBootSecuredWebApplication {
         if (getDebugSettings().isAjaxDebugModeEnabled()) {
             getDebugSettings().setComponentPathAttributeName("syncope-path");
         }
-
-        serviceOps.register(getNetworkService());
-    }
-
-    @Override
-    protected void onDestroy() {
-        serviceOps.unregister(getNetworkService());
-
-        super.onDestroy();
     }
 
     @Override
diff --git a/client/idrepo/enduser/src/main/java/org/apache/syncope/client/enduser/SyncopeEnduserApplication.java b/client/idrepo/enduser/src/main/java/org/apache/syncope/client/enduser/SyncopeEnduserApplication.java
index 975a076..aaac232 100644
--- a/client/idrepo/enduser/src/main/java/org/apache/syncope/client/enduser/SyncopeEnduserApplication.java
+++ b/client/idrepo/enduser/src/main/java/org/apache/syncope/client/enduser/SyncopeEnduserApplication.java
@@ -21,6 +21,9 @@ package org.apache.syncope.client.enduser;
 import com.giffing.wicket.spring.boot.starter.web.config.WicketWebInitializerAutoConfig.WebSocketWicketWebInitializerAutoConfiguration;
 import org.apache.syncope.client.enduser.init.ClassPathScanImplementationLookup;
 import org.apache.syncope.client.enduser.init.MIMETypesLoader;
+import org.apache.syncope.common.keymaster.client.api.model.NetworkService;
+import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStart;
+import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStop;
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean;
@@ -45,6 +48,16 @@ public class SyncopeEnduserApplication extends SpringBootServletInitializer {
         return super.configure(builder);
     }
 
+    @Bean
+    public KeymasterStart keymasterStart() {
+        return new KeymasterStart(NetworkService.Type.ENDUSER);
+    }
+
+    @Bean
+    public KeymasterStop keymasterStop() {
+        return new KeymasterStop(NetworkService.Type.ENDUSER);
+    }
+
     @ConditionalOnMissingBean(name = "classPathScanImplementationLookup")
     @Bean
     public ClassPathScanImplementationLookup classPathScanImplementationLookup() {
diff --git a/client/idrepo/enduser/src/main/java/org/apache/syncope/client/enduser/SyncopeWebApplication.java b/client/idrepo/enduser/src/main/java/org/apache/syncope/client/enduser/SyncopeWebApplication.java
index edc4ae4..176fa39 100644
--- a/client/idrepo/enduser/src/main/java/org/apache/syncope/client/enduser/SyncopeWebApplication.java
+++ b/client/idrepo/enduser/src/main/java/org/apache/syncope/client/enduser/SyncopeWebApplication.java
@@ -83,7 +83,6 @@ import org.apache.wicket.util.lang.Args;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.beans.factory.annotation.Value;
 import org.springframework.stereotype.Component;
 
 @Component
@@ -110,9 +109,6 @@ public class SyncopeWebApplication extends WicketBootStandardWebApplication {
     @Autowired
     private ServiceOps serviceOps;
 
-    @Value("${service.discovery.address}")
-    private String address;
-
     private boolean useGZIPCompression;
 
     private String adminUser;
@@ -148,13 +144,6 @@ public class SyncopeWebApplication extends WicketBootStandardWebApplication {
         }
     }
 
-    private NetworkService getNetworkService() {
-        NetworkService ns = new NetworkService();
-        ns.setType(NetworkService.Type.ENDUSER);
-        ns.setAddress(address);
-        return ns;
-    }
-
     @Override
     protected void init() {
         super.init();
@@ -355,14 +344,10 @@ public class SyncopeWebApplication extends WicketBootStandardWebApplication {
         if (getDebugSettings().isAjaxDebugModeEnabled()) {
             getDebugSettings().setComponentPathAttributeName("syncope-path");
         }
-
-        serviceOps.register(getNetworkService());
     }
 
     @Override
     protected void onDestroy() {
-        serviceOps.unregister(getNetworkService());
-
         if (customFormAttributesMonitor != null) {
             try {
                 customFormAttributesMonitor.stop(0);
diff --git a/common/keymaster/client-api/pom.xml b/common/keymaster/client-api/pom.xml
index 5dcf5ad..37fdb6b 100644
--- a/common/keymaster/client-api/pom.xml
+++ b/common/keymaster/client-api/pom.xml
@@ -43,6 +43,11 @@ under the License.
       <artifactId>syncope-common-idrepo-lib</artifactId>
       <version>${project.version}</version>
     </dependency>
+
+    <dependency>
+      <groupId>org.springframework</groupId>
+      <artifactId>spring-context</artifactId>
+    </dependency>
   </dependencies>
 
   <build>
diff --git a/sra/src/main/java/org/apache/syncope/sra/SyncopeSRAStartup.java b/common/keymaster/client-api/src/main/java/org/apache/syncope/common/keymaster/client/api/startstop/KeymasterStart.java
similarity index 78%
rename from sra/src/main/java/org/apache/syncope/sra/SyncopeSRAStartup.java
rename to common/keymaster/client-api/src/main/java/org/apache/syncope/common/keymaster/client/api/startstop/KeymasterStart.java
index cbc7b59..f164865 100644
--- a/sra/src/main/java/org/apache/syncope/sra/SyncopeSRAStartup.java
+++ b/common/keymaster/client-api/src/main/java/org/apache/syncope/common/keymaster/client/api/startstop/KeymasterStart.java
@@ -16,16 +16,19 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-package org.apache.syncope.sra;
+package org.apache.syncope.common.keymaster.client.api.startstop;
 
+import org.apache.syncope.common.keymaster.client.api.model.NetworkService;
 import org.springframework.context.ApplicationListener;
 import org.springframework.context.event.ContextRefreshedEvent;
-import org.springframework.stereotype.Component;
 
-@Component
-public class SyncopeSRAStartup extends SyncopeSRAStartStop
+public class KeymasterStart extends KeymasterStartStop
         implements ApplicationListener<ContextRefreshedEvent> {
 
+    public KeymasterStart(final NetworkService.Type networkServiceType) {
+        super(networkServiceType);
+    }
+
     @Override
     public void onApplicationEvent(final ContextRefreshedEvent event) {
         serviceOps.register(getNetworkService());
diff --git a/core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreStartStop.java b/common/keymaster/client-api/src/main/java/org/apache/syncope/common/keymaster/client/api/startstop/KeymasterStartStop.java
similarity index 79%
rename from core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreStartStop.java
rename to common/keymaster/client-api/src/main/java/org/apache/syncope/common/keymaster/client/api/startstop/KeymasterStartStop.java
index 7f52923..29a161b 100644
--- a/core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreStartStop.java
+++ b/common/keymaster/client-api/src/main/java/org/apache/syncope/common/keymaster/client/api/startstop/KeymasterStartStop.java
@@ -16,24 +16,30 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-package org.apache.syncope.core.starter;
+package org.apache.syncope.common.keymaster.client.api.startstop;
 
 import org.apache.syncope.common.keymaster.client.api.ServiceOps;
 import org.apache.syncope.common.keymaster.client.api.model.NetworkService;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.beans.factory.annotation.Value;
 
-abstract class SyncopeCoreStartStop {
+abstract class KeymasterStartStop {
 
     @Autowired
     protected ServiceOps serviceOps;
 
+    protected final NetworkService.Type networkServiceType;
+
+    protected KeymasterStartStop(final NetworkService.Type networkServiceType) {
+        this.networkServiceType = networkServiceType;
+    }
+
     @Value("${service.discovery.address}")
     private String address;
 
     protected NetworkService getNetworkService() {
         NetworkService ns = new NetworkService();
-        ns.setType(NetworkService.Type.CORE);
+        ns.setType(networkServiceType);
         ns.setAddress(address);
         return ns;
     }
diff --git a/core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreShutdown.java b/common/keymaster/client-api/src/main/java/org/apache/syncope/common/keymaster/client/api/startstop/KeymasterStop.java
similarity index 78%
rename from core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreShutdown.java
rename to common/keymaster/client-api/src/main/java/org/apache/syncope/common/keymaster/client/api/startstop/KeymasterStop.java
index 256607e..7851a39 100644
--- a/core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreShutdown.java
+++ b/common/keymaster/client-api/src/main/java/org/apache/syncope/common/keymaster/client/api/startstop/KeymasterStop.java
@@ -16,19 +16,19 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-package org.apache.syncope.core.starter;
+package org.apache.syncope.common.keymaster.client.api.startstop;
 
+import org.apache.syncope.common.keymaster.client.api.model.NetworkService;
 import org.springframework.context.ApplicationListener;
 import org.springframework.context.event.ContextClosedEvent;
-import org.springframework.stereotype.Component;
 
-/**
- * Take care of cleanup actions needed by Syncope Core.
- */
-@Component
-public class SyncopeCoreShutdown extends SyncopeCoreStartStop
+public class KeymasterStop extends KeymasterStartStop
         implements ApplicationListener<ContextClosedEvent> {
 
+    public KeymasterStop(final NetworkService.Type networkServiceType) {
+        super(networkServiceType);
+    }
+
     @Override
     public void onApplicationEvent(final ContextClosedEvent event) {
         serviceOps.unregister(getNetworkService());
diff --git a/core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreApplication.java b/core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreApplication.java
index 9c9aaf4..8902bec 100644
--- a/core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreApplication.java
+++ b/core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreApplication.java
@@ -20,6 +20,8 @@ package org.apache.syncope.core.starter;
 
 import java.io.IOException;
 import org.apache.cxf.spring.boot.autoconfigure.openapi.OpenApiAutoConfiguration;
+import org.apache.syncope.common.keymaster.client.api.model.NetworkService;
+import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStop;
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean;
@@ -57,4 +59,14 @@ public class SyncopeCoreApplication extends SpringBootServletInitializer {
         pspc.setIgnoreUnresolvablePlaceholders(true);
         return pspc;
     }
+
+    @Bean
+    public SyncopeCoreStart keymasterStart() {
+        return new SyncopeCoreStart();
+    }
+
+    @Bean
+    public KeymasterStop keymasterStop() {
+        return new KeymasterStop(NetworkService.Type.CORE);
+    }
 }
diff --git a/core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreStartup.java b/core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreStart.java
similarity index 89%
rename from core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreStartup.java
rename to core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreStart.java
index f93de92..515fa13 100644
--- a/core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreStartup.java
+++ b/core/starter/src/main/java/org/apache/syncope/core/starter/SyncopeCoreStart.java
@@ -19,6 +19,8 @@
 package org.apache.syncope.core.starter;
 
 import java.util.Comparator;
+import org.apache.syncope.common.keymaster.client.api.model.NetworkService;
+import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStart;
 import org.apache.syncope.core.persistence.api.DomainHolder;
 import org.apache.syncope.core.persistence.api.SyncopeCoreLoader;
 import org.slf4j.Logger;
@@ -28,20 +30,22 @@ import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.context.ApplicationListener;
 import org.springframework.context.event.ContextRefreshedEvent;
 import org.springframework.core.Ordered;
-import org.springframework.stereotype.Component;
 
 /**
  * Take care of all initializations needed by Syncope Core to run up and safe.
  */
-@Component
-public class SyncopeCoreStartup extends SyncopeCoreStartStop
+public class SyncopeCoreStart extends KeymasterStart
         implements ApplicationListener<ContextRefreshedEvent>, Ordered {
 
-    private static final Logger LOG = LoggerFactory.getLogger(SyncopeCoreStartup.class);
+    private static final Logger LOG = LoggerFactory.getLogger(SyncopeCoreStart.class);
 
     @Autowired
     private DomainHolder domainHolder;
 
+    public SyncopeCoreStart() {
+        super(NetworkService.Type.CORE);
+    }
+
     @Override
     public int getOrder() {
         return 0;
diff --git a/docker/core/src/main/resources/log4j2.xml b/docker/core/src/main/resources/log4j2.xml
index 1941154..063d123 100644
--- a/docker/core/src/main/resources/log4j2.xml
+++ b/docker/core/src/main/resources/log4j2.xml
@@ -108,6 +108,10 @@ under the License.
       <appender-ref ref="console"/>
       <appender-ref ref="main"/>
     </asyncLogger>
+    <asyncLogger name="liquibase" additivity="false" level="ERROR">
+      <appender-ref ref="console"/>
+      <appender-ref ref="main"/>
+    </asyncLogger>
     <asyncLogger name="org.apache.cocoon" additivity="false" level="ERROR">
       <appender-ref ref="console"/>
       <appender-ref ref="main"/>
diff --git a/docker/pom.xml b/docker/pom.xml
index db2f0d5..dd17d08 100644
--- a/docker/pom.xml
+++ b/docker/pom.xml
@@ -42,13 +42,6 @@ under the License.
     <rootpom.basedir>${basedir}/..</rootpom.basedir>
   </properties>
 
-  <modules>
-    <module>core</module>
-    <module>console</module>
-    <module>enduser</module>
-    <module>sra</module>
-  </modules>
-
   <build>
     <resources>
       <resource>
@@ -120,5 +113,12 @@ under the License.
       </build>
     </profile>    
   </profiles>
-  
+
+  <modules>
+    <module>core</module>
+    <module>console</module>
+    <module>enduser</module>
+    <module>sra</module>
+    <module>wa</module>
+  </modules>
 </project>
diff --git a/docker/src/main/resources/docker-compose/docker-compose-all.yml b/docker/src/main/resources/docker-compose/docker-compose-all.yml
index e3a9c25..29d6918 100644
--- a/docker/src/main/resources/docker-compose/docker-compose-all.yml
+++ b/docker/src/main/resources/docker-compose/docker-compose-all.yml
@@ -24,7 +24,7 @@ version: '3.3'
 
 services:
    keymaster:
-     image: zookeeper:3.4.14
+     image: zookeeper:3.5.6
      restart: always
 
    db:
@@ -84,13 +84,27 @@ services:
        KEYMASTER_PASSWORD: ${KEYMASTER_PASSWORD:-}
        SERVICE_DISCOVERY_ADDRESS: http://syncope-enduser:8080/syncope-enduser/
 
+   syncope-wa:
+     depends_on:
+       - syncope
+       - keymaster
+     image: apache/syncope-wa:${SYNCOPE_VERSION}
+     ports:
+       - "48080:8080"
+     restart: always
+     environment:
+       KEYMASTER_ADDRESS: keymaster:2181
+       KEYMASTER_USERNAME: ${KEYMASTER_USERNAME:-}
+       KEYMASTER_PASSWORD: ${KEYMASTER_PASSWORD:-}
+       SERVICE_DISCOVERY_ADDRESS: http://syncope-wa:8080/syncope-wa/
+
    syncope-sra:
      depends_on:
        - syncope
        - keymaster
      image: apache/syncope-sra:${SYNCOPE_VERSION}
      ports:
-       - "48080:8080"
+       - "58080:8080"
      restart: always
      environment:
        KEYMASTER_ADDRESS: keymaster:2181
diff --git a/docker/wa/LICENSE b/docker/wa/LICENSE
new file mode 100644
index 0000000..d645695
--- /dev/null
+++ b/docker/wa/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/docker/wa/NOTICE b/docker/wa/NOTICE
new file mode 100644
index 0000000..3db7985
--- /dev/null
+++ b/docker/wa/NOTICE
@@ -0,0 +1,5 @@
+Apache Syncope
+Copyright 2012-2019 The Apache Software Foundation
+
+This product includes software developed by:
+The Apache Software Foundation (http://www.apache.org/).
diff --git a/docker/wa/pom.xml b/docker/wa/pom.xml
new file mode 100644
index 0000000..13721b8
--- /dev/null
+++ b/docker/wa/pom.xml
@@ -0,0 +1,177 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements.  See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership.  The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License.  You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied.  See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+
+  <modelVersion>4.0.0</modelVersion>
+
+  <parent>
+    <groupId>org.apache.syncope</groupId>
+    <artifactId>syncope-docker</artifactId>
+    <version>3.0.0-SNAPSHOT</version>
+  </parent>
+
+  <name>Apache Syncope Docker WA</name>
+  <description>Apache Syncope Docker WA</description>
+  <groupId>org.apache.syncope</groupId>
+  <artifactId>syncope-docker-wa</artifactId>
+  <packaging>war</packaging>
+
+  <properties>
+    <guava.version>28.2-jre</guava.version>
+    <opensaml.version>3.4.5</opensaml.version>
+    <bootstrap.version>4.4.1</bootstrap.version>
+    <slf4j.version>2.0.0-alpha1</slf4j.version>
+
+    <rootpom.basedir>${basedir}/../..</rootpom.basedir>
+  </properties>
+  
+  <dependencies>
+    <dependency>
+      <groupId>org.springframework.boot</groupId>
+      <artifactId>spring-boot-starter-undertow</artifactId>
+    </dependency>
+
+    <dependency>
+      <groupId>org.apache.syncope</groupId>
+      <artifactId>syncope-wa</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+
+    <dependency>
+      <groupId>org.apache.syncope.ext.self-keymaster</groupId>
+      <artifactId>syncope-ext-self-keymaster-client</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.syncope.common.keymaster</groupId>
+      <artifactId>syncope-common-keymaster-client-zookeeper</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+  </dependencies>
+
+  <build>
+    <plugins>
+      <plugin>
+        <groupId>org.apache.maven.plugins</groupId>
+        <artifactId>maven-war-plugin</artifactId>
+        <inherited>false</inherited>
+        <configuration>
+          <webXml>${basedir}/../../fit/wa-reference/src/main/webapp/WEB-INF/web.xml</webXml>
+          <webResources>
+            <resource>
+              <directory>${basedir}</directory>
+              <targetPath>META-INF</targetPath>
+              <includes>
+                <include>LICENSE</include>
+                <include>NOTICE</include>
+              </includes>
+            </resource>
+          </webResources>
+          <outputDirectory>${project.build.outputDirectory}</outputDirectory>
+        </configuration>
+      </plugin>
+
+      <plugin>
+        <groupId>org.springframework.boot</groupId>
+        <artifactId>spring-boot-maven-plugin</artifactId>
+        <configuration>
+          <mainClass>org.apache.syncope.wa.SyncopeWAApplication</mainClass>
+          <layout>ZIP</layout>
+        </configuration>
+        <executions>
+          <execution>
+            <goals>
+              <goal>repackage</goal>
+            </goals>
+            <configuration>
+              <outputDirectory>${project.build.outputDirectory}</outputDirectory>
+            </configuration>
+          </execution>
+        </executions>
+      </plugin>
+
+      <plugin>
+        <groupId>io.fabric8</groupId>
+        <artifactId>docker-maven-plugin</artifactId>
+        <configuration>
+          <verbose>true</verbose>
+          <images>
+            <image>
+              <name>apache/syncope-wa:%v</name>
+              <build>
+                <dockerFileDir>${project.build.outputDirectory}</dockerFileDir>
+              </build>
+            </image>
+          </images>
+        </configuration>
+        <executions>
+          <execution>
+            <id>remove-syncope-wa</id>
+            <phase>initialize</phase>
+            <goals>
+              <goal>remove</goal>
+            </goals>
+          </execution>
+          <execution>
+            <id>build-syncope-wa</id>
+            <phase>package</phase>
+            <goals>
+              <goal>build</goal>
+            </goals>
+          </execution>
+        </executions>
+      </plugin>
+    </plugins>
+    
+    <resources>
+      <resource>
+        <directory>src/main/resources</directory>
+        <filtering>true</filtering>
+      </resource>
+    </resources>
+  </build>
+
+  <profiles>
+    <profile>
+      <id>apache-release</id>
+
+      <build>
+        <plugins>      
+          <plugin>
+            <groupId>org.apache.maven.plugins</groupId>
+            <artifactId>maven-deploy-plugin</artifactId>
+            <configuration>
+              <skip>true</skip>
+            </configuration>
+          </plugin>           
+          <plugin>
+            <groupId>org.apache.maven.plugins</groupId>
+            <artifactId>maven-source-plugin</artifactId>
+            <inherited>false</inherited>
+            <configuration>
+              <skipSource>true</skipSource>
+            </configuration>
+          </plugin>
+        </plugins>
+      </build>
+    </profile>
+  </profiles>
+
+</project>
diff --git a/wa/src/main/resources/application.properties b/docker/wa/src/main/resources/Dockerfile
similarity index 53%
copy from wa/src/main/resources/application.properties
copy to docker/wa/src/main/resources/Dockerfile
index 487d11b..7edf8dc 100644
--- a/wa/src/main/resources/application.properties
+++ b/docker/wa/src/main/resources/Dockerfile
@@ -14,27 +14,26 @@
 # KIND, either express or implied.  See the License for the
 # specific language governing permissions and limitations
 # under the License.
-spring.application.name=Apache Syncope ${syncope.version} WA
-spring.groovy.template.check-template-location=false
-spring.main.banner-mode=log
 
-server.port=8080
+# Cannot FROM adoptopenjdk/openjdk11-openj9:alpine-slim because it's headless, and fonts might be required
+FROM openjdk:11
+MAINTAINER dev@syncope.apache.org
 
-spring.http.encoding.charset=UTF-8
-spring.http.encoding.enabled=true
-spring.http.encoding.force=true
+RUN set -x
 
-server.servlet.contextPath=/syncope-wa
+RUN mkdir /opt/syncope
+RUN mkdir /opt/syncope/bin
+RUN mkdir /opt/syncope/conf
+RUN mkdir /opt/syncope/lib
+RUN mkdir /opt/syncope/log
 
-##
-# Allow configuration classes to override bean definitions from Spring Boot
-#
-spring.main.allow-bean-definition-overriding=true
-spring.main.lazy-initialization=false
+COPY *.properties /opt/syncope/conf/
+COPY log4j2.xml /opt/syncope/conf/
+
+COPY syncope-docker-wa-*war /opt/syncope/lib/syncope-wa.war
 
-service.discovery.address=http://localhost:8080/syncope-wa/
+COPY startup.sh /opt/syncope/bin
+RUN chmod 755 /opt/syncope/bin/startup.sh
+CMD ["/opt/syncope/bin/startup.sh"]
 
-# Conf directories
-conf.directory=${conf.directory}
-cas.standalone.configurationDirectory=${conf.directory}
-cas.authn.oidc.jwksFile=file:${conf.directory}/oidc.keystore
+EXPOSE 8080
diff --git a/wa/src/main/resources/application.properties b/docker/wa/src/main/resources/application.properties
similarity index 95%
copy from wa/src/main/resources/application.properties
copy to docker/wa/src/main/resources/application.properties
index 487d11b..254b399 100644
--- a/wa/src/main/resources/application.properties
+++ b/docker/wa/src/main/resources/application.properties
@@ -32,7 +32,7 @@ server.servlet.contextPath=/syncope-wa
 spring.main.allow-bean-definition-overriding=true
 spring.main.lazy-initialization=false
 
-service.discovery.address=http://localhost:8080/syncope-wa/
+service.discovery.address=${SERVICE_DISCOVERY_ADDRESS}
 
 # Conf directories
 conf.directory=${conf.directory}
diff --git a/wa/src/main/resources/application.properties b/docker/wa/src/main/resources/keymaster.properties
similarity index 52%
copy from wa/src/main/resources/application.properties
copy to docker/wa/src/main/resources/keymaster.properties
index 487d11b..14e8ca6 100644
--- a/wa/src/main/resources/application.properties
+++ b/docker/wa/src/main/resources/keymaster.properties
@@ -14,27 +14,6 @@
 # KIND, either express or implied.  See the License for the
 # specific language governing permissions and limitations
 # under the License.
-spring.application.name=Apache Syncope ${syncope.version} WA
-spring.groovy.template.check-template-location=false
-spring.main.banner-mode=log
-
-server.port=8080
-
-spring.http.encoding.charset=UTF-8
-spring.http.encoding.enabled=true
-spring.http.encoding.force=true
-
-server.servlet.contextPath=/syncope-wa
-
-##
-# Allow configuration classes to override bean definitions from Spring Boot
-#
-spring.main.allow-bean-definition-overriding=true
-spring.main.lazy-initialization=false
-
-service.discovery.address=http://localhost:8080/syncope-wa/
-
-# Conf directories
-conf.directory=${conf.directory}
-cas.standalone.configurationDirectory=${conf.directory}
-cas.authn.oidc.jwksFile=file:${conf.directory}/oidc.keystore
+keymaster.address=${KEYMASTER_ADDRESS}
+keymaster.username=${KEYMASTER_USERNAME}
+keymaster.password=${KEYMASTER_PASSWORD}
diff --git a/docker/wa/src/main/resources/log4j2.xml b/docker/wa/src/main/resources/log4j2.xml
new file mode 100644
index 0000000..269180c
--- /dev/null
+++ b/docker/wa/src/main/resources/log4j2.xml
@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements.  See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership.  The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License.  You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied.  See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configuration status="WARN">
+
+  <appenders>
+
+    <Console name="console" target="SYSTEM_OUT" follow="true">
+      <PatternLayout pattern="%d{${LOG_DATEFORMAT_PATTERN:-yyyy-MM-dd HH:mm:ss.SSS}} %highlight{${LOG_LEVEL_PATTERN:-%5p}}{FATAL=red blink, ERROR=red, WARN=yellow bold, INFO=green, DEBUG=green bold, TRACE=blue} [%11.11t] %style{%-60.60c{60}}{cyan} : %m%n${LOG_EXCEPTION_CONVERSION_WORD:-%wEx}"/>
+    </Console>
+    
+  </appenders>
+  
+  <loggers>
+    
+    <asyncLogger name="org.apereo.cas" additivity="false" level="INFO">
+      <appender-ref ref="console"/>
+    </asyncLogger>
+    <asyncLogger name="org.apereo.inspektr.audit.support" additivity="false" level="INFO">
+      <appender-ref ref="console"/>
+    </asyncLogger>
+
+    <asyncLogger name="org.springframework" additivity="false" level="INFO">
+      <appender-ref ref="console"/>
+    </asyncLogger>
+
+    <asyncLogger name="org.apache.syncope.client.lib" additivity="false" level="OFF">
+      <appender-ref ref="console"/>
+    </asyncLogger>
+    <asyncLogger name="org.apache.syncope.wa" additivity="false" level="INFO">
+      <appender-ref ref="console"/>
+    </asyncLogger>
+
+    <asyncLogger name="org.apache.cxf" additivity="false" level="ERROR">
+      <appender-ref ref="console"/>
+    </asyncLogger>
+
+    <root level="INFO">
+      <appender-ref ref="console"/>
+    </root>
+    
+  </loggers>
+</configuration>
diff --git a/wa/src/main/resources/application.properties b/docker/wa/src/main/resources/startup.sh
old mode 100644
new mode 100755
similarity index 52%
copy from wa/src/main/resources/application.properties
copy to docker/wa/src/main/resources/startup.sh
index 487d11b..68c70da
--- a/wa/src/main/resources/application.properties
+++ b/docker/wa/src/main/resources/startup.sh
@@ -1,3 +1,5 @@
+#!/bin/sh
+
 # Licensed to the Apache Software Foundation (ASF) under one
 # or more contributor license agreements.  See the NOTICE file
 # distributed with this work for additional information
@@ -14,27 +16,7 @@
 # KIND, either express or implied.  See the License for the
 # specific language governing permissions and limitations
 # under the License.
-spring.application.name=Apache Syncope ${syncope.version} WA
-spring.groovy.template.check-template-location=false
-spring.main.banner-mode=log
-
-server.port=8080
-
-spring.http.encoding.charset=UTF-8
-spring.http.encoding.enabled=true
-spring.http.encoding.force=true
-
-server.servlet.contextPath=/syncope-wa
-
-##
-# Allow configuration classes to override bean definitions from Spring Boot
-#
-spring.main.allow-bean-definition-overriding=true
-spring.main.lazy-initialization=false
-
-service.discovery.address=http://localhost:8080/syncope-wa/
 
-# Conf directories
-conf.directory=${conf.directory}
-cas.standalone.configurationDirectory=${conf.directory}
-cas.authn.oidc.jwksFile=file:${conf.directory}/oidc.keystore
+export LOADER_PATH="/opt/syncope/conf,/opt/syncope/lib"
+java -Dfile.encoding=UTF-8 -server -Xms1536m -Xmx1536m -XX:NewSize=256m -XX:MaxNewSize=256m \
+ -XX:+DisableExplicitGC -Djava.security.egd=file:/dev/./urandom -jar /opt/syncope/lib/syncope-wa.war
diff --git a/wa/src/main/resources/application.properties b/docker/wa/src/main/resources/wa.properties
similarity index 64%
copy from wa/src/main/resources/application.properties
copy to docker/wa/src/main/resources/wa.properties
index 487d11b..a208075 100644
--- a/wa/src/main/resources/application.properties
+++ b/docker/wa/src/main/resources/wa.properties
@@ -14,25 +14,10 @@
 # KIND, either express or implied.  See the License for the
 # specific language governing permissions and limitations
 # under the License.
-spring.application.name=Apache Syncope ${syncope.version} WA
-spring.groovy.template.check-template-location=false
-spring.main.banner-mode=log
+anonymousUser=${anonymousUser}
+anonymousKey=${anonymousKey}
 
-server.port=8080
-
-spring.http.encoding.charset=UTF-8
-spring.http.encoding.enabled=true
-spring.http.encoding.force=true
-
-server.servlet.contextPath=/syncope-wa
-
-##
-# Allow configuration classes to override bean definitions from Spring Boot
-#
-spring.main.allow-bean-definition-overriding=true
-spring.main.lazy-initialization=false
-
-service.discovery.address=http://localhost:8080/syncope-wa/
+useGZIPCompression=true
 
 # Conf directories
 conf.directory=${conf.directory}
diff --git a/ext/self-keymaster/logic/src/main/java/org/apache/syncope/core/logic/NetworkServiceLogic.java b/ext/self-keymaster/logic/src/main/java/org/apache/syncope/core/logic/NetworkServiceLogic.java
index d97af30..554cb29 100644
--- a/ext/self-keymaster/logic/src/main/java/org/apache/syncope/core/logic/NetworkServiceLogic.java
+++ b/ext/self-keymaster/logic/src/main/java/org/apache/syncope/core/logic/NetworkServiceLogic.java
@@ -43,8 +43,8 @@ public class NetworkServiceLogic extends AbstractTransactionalLogic<EntityTO> {
     private SelfKeymasterEntityFactory entityFactory;
 
     private static NetworkService toNetworkService(
-        final NetworkService.Type serviceType,
-        final NetworkServiceEntity service) {
+            final NetworkService.Type serviceType,
+            final NetworkServiceEntity service) {
 
         NetworkService ns = new NetworkService();
         ns.setType(serviceType);
@@ -84,7 +84,7 @@ public class NetworkServiceLogic extends AbstractTransactionalLogic<EntityTO> {
     public void unregister(final NetworkService networkService) {
         serviceDAO.findAll(networkService.getType()).stream().
                 filter(service -> service.getAddress().equals(networkService.getAddress())).
-                findFirst().ifPresent(service -> serviceDAO.delete(service));
+                forEach(service -> serviceDAO.delete(service));
     }
 
     @Override
diff --git a/fit/console-reference/pom.xml b/fit/console-reference/pom.xml
index f80f55b..9e4fca4 100644
--- a/fit/console-reference/pom.xml
+++ b/fit/console-reference/pom.xml
@@ -56,11 +56,6 @@ under the License.
       <artifactId>syncope-ext-self-keymaster-client</artifactId>
       <version>${project.version}</version>
     </dependency>
-    <dependency>
-      <groupId>org.apache.syncope.common.keymaster</groupId>
-      <artifactId>syncope-common-keymaster-client-zookeeper</artifactId>
-      <version>${project.version}</version>
-    </dependency>
 
     <dependency>
       <groupId>org.apache.syncope.ext.flowable</groupId>
diff --git a/fit/enduser-reference/pom.xml b/fit/enduser-reference/pom.xml
index 812478d..29c34fd 100644
--- a/fit/enduser-reference/pom.xml
+++ b/fit/enduser-reference/pom.xml
@@ -51,11 +51,6 @@ under the License.
       <artifactId>syncope-ext-self-keymaster-client</artifactId>
       <version>${project.version}</version>
     </dependency>
-    <dependency>
-      <groupId>org.apache.syncope.common.keymaster</groupId>
-      <artifactId>syncope-common-keymaster-client-zookeeper</artifactId>
-      <version>${project.version}</version>
-    </dependency>
     
     <dependency>
       <groupId>org.apache.syncope.ext.flowable</groupId>
diff --git a/fit/wa-reference/pom.xml b/fit/wa-reference/pom.xml
index 7c08b20..e097196 100644
--- a/fit/wa-reference/pom.xml
+++ b/fit/wa-reference/pom.xml
@@ -50,6 +50,52 @@ under the License.
       <artifactId>syncope-wa</artifactId>
       <version>${project.version}</version>
     </dependency>
+
+    <dependency>
+      <groupId>org.apache.syncope.ext.self-keymaster</groupId>
+      <artifactId>syncope-ext-self-keymaster-client</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+
+    <!-- TEST -->
+    <dependency>
+      <groupId>com.h2database</groupId>
+      <artifactId>h2</artifactId>
+      <scope>test</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.syncope.fit</groupId>
+      <artifactId>syncope-fit-build-tools</artifactId>
+      <version>${project.version}</version>
+      <type>war</type>
+      <scope>test</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.syncope.fit</groupId>
+      <artifactId>syncope-fit-core-reference</artifactId>
+      <version>${project.version}</version>
+      <type>war</type>
+      <scope>test</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.syncope.fit</groupId>
+      <artifactId>syncope-fit-console-reference</artifactId>
+      <version>${project.version}</version>
+      <type>war</type>
+      <scope>test</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.syncope.fit</groupId>
+      <artifactId>syncope-fit-enduser-reference</artifactId>
+      <version>${project.version}</version>
+      <type>war</type>
+      <scope>test</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.junit.jupiter</groupId>
+      <artifactId>junit-jupiter</artifactId>
+      <scope>test</scope>
+    </dependency>
   </dependencies>
 
   <build>
@@ -66,9 +112,15 @@ under the License.
               <downloadDir>${settings.localRepository}/org/codehaus/cargo/cargo-container-archives</downloadDir>
               <extractDir>${project.build.directory}/cargo/extract</extractDir>
             </zipUrlInstaller>
-            <timeout>300000</timeout>
+            <timeout>600000</timeout>
             <log>${cargo.log}</log>
             <output>${cargo.output}</output>
+            <dependencies>
+              <dependency>
+                <groupId>com.h2database</groupId>
+                <artifactId>h2</artifactId>
+              </dependency>
+            </dependencies>
           </container>
           <configuration>
             <properties>
@@ -79,6 +131,34 @@ under the License.
           </configuration>
           <deployables>
             <deployable>
+              <groupId>org.apache.syncope.fit</groupId>
+              <artifactId>syncope-fit-build-tools</artifactId>
+              <type>war</type>
+              <properties>
+                <context>syncope-fit-build-tools</context>
+              </properties>
+            </deployable>
+            <deployable>
+              <location>${basedir}/../core-reference/target/syncope-fit-core-reference-${project.version}</location>
+              <pingURL>http://localhost:${cargo.servlet.port}/syncope/index.html</pingURL>
+              <pingTimeout>${cargo.deployable.ping.timeout}</pingTimeout>
+              <properties>
+                <context>syncope</context>
+              </properties>
+            </deployable>
+            <deployable>
+              <location>${basedir}/../console-reference/target/syncope-fit-console-reference-${project.version}</location>
+              <properties>
+                <context>syncope-console</context>
+              </properties>
+            </deployable>
+            <deployable>
+              <location>${basedir}/../enduser-reference/target/syncope-fit-enduser-reference-${project.version}</location>
+              <properties>
+                <context>syncope-enduser</context>
+              </properties>
+            </deployable>
+            <deployable>
               <location>${project.build.directory}/${project.build.finalName}</location>
               <properties>
                 <context>syncope-wa</context>
@@ -113,13 +193,6 @@ under the License.
   
   <profiles>
     <profile>
-      <id>properties4cas</id>
-      <activation>
-        <activeByDefault>true</activeByDefault>
-      </activation>
-    </profile>
-
-    <profile>
       <id>skipTests</id>
     </profile>
 
@@ -143,6 +216,7 @@ under the License.
                 <properties>
                   <cargo.jvmargs>
                     -Dspring.profiles.active=embedded
+                    -Dwicket.core.settings.general.configuration-type=development
                     -Xdebug -Djaxb.debug=true -Xrunjdwp:transport=dt_socket,address=8000,server=y,suspend=n
                     -XX:+CMSClassUnloadingEnabled -XX:+UseG1GC -Xmx1024m -Xms512m</cargo.jvmargs>
                 </properties>
@@ -152,6 +226,73 @@ under the License.
         </plugins>
       </build>
     </profile>
+    
+    <!-- requires JAVA_HOME set to the latest JDK from https://github.com/TravaOpenJDK/trava-jdk-11-dcevm -->
+    <profile>
+      <id>hotswap</id>
+      
+      <build>
+        <defaultGoal>clean verify cargo:run</defaultGoal>
+
+        <plugins>
+          <plugin>
+            <groupId>org.apache.maven.plugins</groupId>
+            <artifactId>maven-antrun-plugin</artifactId>
+            <inherited>true</inherited>
+            <executions>
+              <execution>
+                <id>enableHotSwapForCoreAndConsoleAndEnduser</id>
+                <phase>package</phase>
+                <configuration>
+                  <target>                                               
+                    <copy file="${basedir}/../core-reference/target/test-classes/hotswap-agent.properties"
+                          tofile="${basedir}/../core-reference/target/syncope-fit-core-reference-${project.version}/WEB-INF/classes/hotswap-agent.properties"
+                          overwrite="true"/>
+                    <copy file="${basedir}/../console-reference/target/test-classes/hotswap-agent.properties"
+                          tofile="${basedir}/../console-reference/target/syncope-fit-console-reference-${project.version}/WEB-INF/classes/hotswap-agent.properties"
+                          overwrite="true"/>
+                    <copy file="${basedir}/../enduser-reference/target/test-classes/hotswap-agent.properties"
+                          tofile="${basedir}/../enduser-reference/target/syncope-fit-enduser-reference-${project.version}/WEB-INF/classes/hotswap-agent.properties"
+                          overwrite="true"/>
+                  </target>
+                </configuration>
+                <goals>
+                  <goal>run</goal>
+                </goals>
+              </execution>
+            </executions>
+          </plugin>
+
+          <plugin>
+            <groupId>org.codehaus.cargo</groupId>
+            <artifactId>cargo-maven2-plugin</artifactId>
+            <inherited>true</inherited>
+            <configuration>
+              <configuration>
+                <properties>
+                  <cargo.jvmargs>
+                    -Dspring.profiles.active=embedded
+                    -Dwicket.core.settings.general.configuration-type=development
+                    -javaagent:${java.home}/lib/hotswap/hotswap-agent.jar=autoHotswap=true,disablePlugin=Spring,disablePlugin=Hibernate,disablePlugin=CxfJAXRS
+                    -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=8000
+                    -XX:+CMSClassUnloadingEnabled -XX:+UseConcMarkSweepGC -Xmx1024m -Xms512m</cargo.jvmargs>
+                </properties>
+              </configuration>
+            </configuration>
+          </plugin>
+        </plugins>
+        
+        <resources>
+          <resource>
+            <directory>src/test/resources</directory>
+            <filtering>true</filtering>
+            <includes>
+              <include>hotswap-agent.properties</include>
+            </includes>
+          </resource>
+        </resources>
+      </build>
+    </profile>
 
     <profile>
       <id>apache-release</id>
@@ -172,7 +313,7 @@ under the License.
             <configuration>
               <skipSource>true</skipSource>
             </configuration>
-          </plugin>
+          </plugin>          
         </plugins>
       </build>
     </profile>
diff --git a/wa/src/main/resources/application.properties b/fit/wa-reference/src/main/resources/keymaster.properties
similarity index 52%
copy from wa/src/main/resources/application.properties
copy to fit/wa-reference/src/main/resources/keymaster.properties
index 487d11b..033fe3b 100644
--- a/wa/src/main/resources/application.properties
+++ b/fit/wa-reference/src/main/resources/keymaster.properties
@@ -14,27 +14,6 @@
 # KIND, either express or implied.  See the License for the
 # specific language governing permissions and limitations
 # under the License.
-spring.application.name=Apache Syncope ${syncope.version} WA
-spring.groovy.template.check-template-location=false
-spring.main.banner-mode=log
-
-server.port=8080
-
-spring.http.encoding.charset=UTF-8
-spring.http.encoding.enabled=true
-spring.http.encoding.force=true
-
-server.servlet.contextPath=/syncope-wa
-
-##
-# Allow configuration classes to override bean definitions from Spring Boot
-#
-spring.main.allow-bean-definition-overriding=true
-spring.main.lazy-initialization=false
-
-service.discovery.address=http://localhost:8080/syncope-wa/
-
-# Conf directories
-conf.directory=${conf.directory}
-cas.standalone.configurationDirectory=${conf.directory}
-cas.authn.oidc.jwksFile=file:${conf.directory}/oidc.keystore
+keymaster.address=http://localhost:9080/syncope/rest/keymaster
+keymaster.username=${anonymousUser}
+keymaster.password=${anonymousKey}
diff --git a/fit/wa-reference/src/main/resources/log4j2.xml b/fit/wa-reference/src/main/resources/log4j2.xml
index 08196df..e184c60 100644
--- a/fit/wa-reference/src/main/resources/log4j2.xml
+++ b/fit/wa-reference/src/main/resources/log4j2.xml
@@ -1,4 +1,4 @@
-<?xml version="1.0" encoding="UTF-8" ?>
+<?xml version="1.0" encoding="UTF-8"?>
 <!--
 Licensed to the Apache Software Foundation (ASF) under one
 or more contributor license agreements.  See the NOTICE file
@@ -17,118 +17,52 @@ KIND, either express or implied.  See the License for the
 specific language governing permissions and limitations
 under the License.
 -->
-<!-- Specify the refresh internal in seconds. -->
-<Configuration monitorInterval="5" packages="org.apereo.cas.logging">
-  <Properties>
-    <Property name="baseDir">${log.directory}</Property>
-    <Property name="cas.log.level">info</Property>
-    <Property name="spring.webflow.log.level">warn</Property>
-    <Property name="spring.security.log.level">info</Property>
-    <Property name="spring.cloud.log.level">warn</Property>
-    <Property name="spring.web.log.level">warn</Property>
-    <Property name="spring.boot.log.level">warn</Property>
-    <Property name="ldap.log.level">warn</Property>
-    <Property name="pac4j.log.level">warn</Property>
-    <Property name="opensaml.log.level">warn</Property>
-    <Property name="hazelcast.log.level">warn</Property>
-  </Properties>
-  <Appenders>
-    <RollingFile name="file" fileName="${baseDir}/wa.log" append="true"
-                 filePattern="${baseDir}/wa-%d{yyyy-MM-dd-HH}-%i.log">
-      <PatternLayout pattern="%highlight{%d %p [%c] - &lt;%m&gt;%n}" />
-      <Policies>
-        <OnStartupTriggeringPolicy />
-        <SizeBasedTriggeringPolicy size="10 MB"/>
-        <TimeBasedTriggeringPolicy />
-      </Policies>
-      <DefaultRolloverStrategy max="5" compressionLevel="9">
-        <Delete basePath="${baseDir}" maxDepth="2">
-          <IfFileName glob="*/*.log.gz" />
-          <IfLastModified age="7d" />
-        </Delete>
-      </DefaultRolloverStrategy>
-    </RollingFile>
-    <RollingFile name="auditlogfile" fileName="${baseDir}/wa-audit.log" append="true"
-                 filePattern="${baseDir}/wa-audit-%d{yyyy-MM-dd-HH}-%i.log">
-      <PatternLayout pattern="%highlight{%d %p [%c] - %m%n}" />
+<configuration status="WARN">
+
+  <appenders>
+
+    <RollingRandomAccessFile name="main" fileName="${log.directory}/wa.log"
+                             filePattern="${log.directory}/wa-%d{yyyy-MM-dd}.log.gz"
+                             immediateFlush="false" append="true">
+      <PatternLayout>
+        <pattern>%d{HH:mm:ss.SSS} %-5level %logger - %msg%n</pattern>
+      </PatternLayout>
       <Policies>
-        <OnStartupTriggeringPolicy />
-        <SizeBasedTriggeringPolicy size="10 MB"/>
-        <TimeBasedTriggeringPolicy />
+        <TimeBasedTriggeringPolicy/>
+        <SizeBasedTriggeringPolicy size="250 MB"/>
       </Policies>
-      <DefaultRolloverStrategy max="5" compressionLevel="9">
-        <Delete basePath="${baseDir}" maxDepth="2">
-          <IfFileName glob="*/*.log.gz" />
-          <IfLastModified age="7d" />
-        </Delete>
-      </DefaultRolloverStrategy>
-    </RollingFile>
+    </RollingRandomAccessFile>
 
-    <CasAppender name="casAudit">
-      <AppenderRef ref="auditlogfile" />
-    </CasAppender>
-    <CasAppender name="casFile">
-      <AppenderRef ref="file" />
-    </CasAppender>
-  </Appenders>
-  <Loggers>
-    <AsyncLogger name="org.apereo.cas" level="${sys:cas.log.level}" includeLocation="true" />
-    <AsyncLogger name="org.apereo.cas.services" level="${sys:cas.log.level}" includeLocation="true" />
-    <AsyncLogger name="org.apereo.spring" level="${sys:cas.log.level}" includeLocation="true" />
-    <AsyncLogger name="org.apereo.services.persondir" level="${sys:cas.log.level}" includeLocation="true" />
-    <AsyncLogger name="org.apereo.cas.web.flow" level="${sys:cas.log.level}" includeLocation="true" />
-    <AsyncLogger name="org.apereo.cas.web.CasWebApplication" level="${sys:cas.log.level}" includeLocation="true"/>
+  </appenders>
 
-    <AsyncLogger name="org.apereo.inspektr.audit.support" additivity="true" level="info" includeLocation="true">
-      <AppenderRef ref="casAudit"/>
-    </AsyncLogger>
+  <loggers>
 
-    <AsyncLogger name="org.springframework.boot" level="${sys:spring.boot.log.level}" />
-    <AsyncLogger name="org.springframework.boot.context.embedded" level="info" />
-    <AsyncLogger name="org.springframework.boot.autoconfigure.security.servlet.UserDetailsServiceAutoConfiguration" level="${sys:spring.security.log.level}" />
-    <AsyncLogger name="org.springframework.boot.autoconfigure.security" level="${sys:spring.security.log.level}" />
-    <AsyncLogger name="org.springframework.boot.devtools" level="debug" />
-        
-    <AsyncLogger name="org.springframework" level="warn" includeLocation="true" />
-    <AsyncLogger name="org.springframework.webflow" level="${sys:spring.webflow.log.level}" includeLocation="true"/>
-    <AsyncLogger name="org.springframework.aop" level="warn" includeLocation="true" />
-    <AsyncLogger name="org.springframework.session" level="warn" includeLocation="true"/>
-    <AsyncLogger name="org.springframework.scheduling" level="info" includeLocation="true"/>
-    <AsyncLogger name="org.springframework.cloud.vault" level="warn" includeLocation="true" />
-    <AsyncLogger name="org.springframework.web.client" level="warn" includeLocation="true" />
-    <AsyncLogger name="org.springframework.security" level="${sys:spring.security.log.level}" includeLocation="true"/>
-    <AsyncLogger name="org.springframework.cloud" level="${sys:spring.cloud.log.level}" includeLocation="true"/>
-    <AsyncLogger name="org.springframework.amqp" level="error" />
-    <AsyncLogger name="org.springframework.integration" level="warn" includeLocation="true"/>
-    <AsyncLogger name="org.springframework.messaging" level="warn" includeLocation="true"/>
-    <AsyncLogger name="org.springframework.web" level="${sys:spring.web.log.level}" includeLocation="true"/>
-    <AsyncLogger name="org.springframework.orm.jpa" level="warn" includeLocation="true"/>
-    <AsyncLogger name="org.springframework.scheduling" level="warn" includeLocation="true"/>
-    <AsyncLogger name="org.springframework.context.annotation" level="off" includeLocation="true"/>
-    <AsyncLogger name="org.springframework.web.socket" level="warn" includeLocation="true"/>
-    <AsyncLogger name="org.springframework.boot.diagnostics.LoggingFailureAnalysisReporter" level="trace" includeLocation="true"/>
+    <asyncLogger name="org.apereo.cas" additivity="false" level="INFO">
+      <appender-ref ref="main"/>
+    </asyncLogger>
+    <asyncLogger name="org.apereo.inspektr.audit.support" additivity="false" level="INFO">
+      <appender-ref ref="main"/>
+    </asyncLogger>
 
-    <AsyncLogger name="com.couchbase" level="warn" includeLocation="true" />
-    <AsyncLogger name="org.apache" level="error" includeLocation="true"/>
-    <AsyncLogger name="com.netflix" level="warn" includeLocation="true"/>
-    <AsyncLogger name="org.quartz" level="warn" includeLocation="true"/>
-    <AsyncLogger name="org.thymeleaf" level="warn" includeLocation="true"/>
-    <AsyncLogger name="org.pac4j" level="${sys:pac4j.log.level}" includeLocation="true"/>
+    <asyncLogger name="org.springframework" additivity="false" level="INFO">
+      <appender-ref ref="main"/>
+    </asyncLogger>
 
-    <AsyncLogger name="org.opensaml" level="${sys:opensaml.log.level}" includeLocation="true"/>
-    <AsyncLogger name="PROTOCOL_MESSAGE" level="${sys:opensaml.log.level}" includeLocation="true" />
+    <asyncLogger name="org.apache.syncope.client.lib" additivity="false" level="OFF">
+      <appender-ref ref="main"/>
+    </asyncLogger>
+    <asyncLogger name="org.apache.syncope.wa" additivity="false" level="INFO">
+      <appender-ref ref="main"/>
+    </asyncLogger>
 
-    <AsyncLogger name="net.sf.ehcache" level="warn" includeLocation="true"/>
-    <AsyncLogger name="net.jradius" level="warn" includeLocation="true"/>
-    <AsyncLogger name="org.openid4java" level="warn" includeLocation="true"/>
-    <AsyncLogger name="org.ldaptive" level="${sys:ldap.log.level}" includeLocation="true"/>
-    <AsyncLogger name="com.hazelcast" level="${sys:hazelcast.log.level}" includeLocation="true"/>
-    <AsyncLogger name="org.jasig.spring" level="warn" includeLocation="true"/>
-    <AsyncLogger name="org.apache.cxf" level="warn" includeLocation="true"/>
-    <AsyncLogger name="org.apache.http" level="warn" includeLocation="true"/>
+    <asyncLogger name="org.apache.cxf" additivity="false" level="ERROR">
+      <appender-ref ref="main"/>
+    </asyncLogger>
 
-    <AsyncRoot level="warn">
-      <AppenderRef ref="casFile"/>
-    </AsyncRoot>
-  </Loggers>
-</Configuration>
+    <root level="INFO">
+      <appender-ref ref="main"/>
+    </root>
+  
+  </loggers>
+  
+</configuration>
diff --git a/wa/src/main/resources/application.properties b/fit/wa-reference/src/main/resources/wa.properties
similarity index 64%
copy from wa/src/main/resources/application.properties
copy to fit/wa-reference/src/main/resources/wa.properties
index 487d11b..a208075 100644
--- a/wa/src/main/resources/application.properties
+++ b/fit/wa-reference/src/main/resources/wa.properties
@@ -14,25 +14,10 @@
 # KIND, either express or implied.  See the License for the
 # specific language governing permissions and limitations
 # under the License.
-spring.application.name=Apache Syncope ${syncope.version} WA
-spring.groovy.template.check-template-location=false
-spring.main.banner-mode=log
+anonymousUser=${anonymousUser}
+anonymousKey=${anonymousKey}
 
-server.port=8080
-
-spring.http.encoding.charset=UTF-8
-spring.http.encoding.enabled=true
-spring.http.encoding.force=true
-
-server.servlet.contextPath=/syncope-wa
-
-##
-# Allow configuration classes to override bean definitions from Spring Boot
-#
-spring.main.allow-bean-definition-overriding=true
-spring.main.lazy-initialization=false
-
-service.discovery.address=http://localhost:8080/syncope-wa/
+useGZIPCompression=true
 
 # Conf directories
 conf.directory=${conf.directory}
diff --git a/wa/src/main/resources/application.properties b/fit/wa-reference/src/test/resources/hotswap-agent.properties
similarity index 52%
copy from wa/src/main/resources/application.properties
copy to fit/wa-reference/src/test/resources/hotswap-agent.properties
index 487d11b..d0bf167 100644
--- a/wa/src/main/resources/application.properties
+++ b/fit/wa-reference/src/test/resources/hotswap-agent.properties
@@ -14,27 +14,10 @@
 # KIND, either express or implied.  See the License for the
 # specific language governing permissions and limitations
 # under the License.
-spring.application.name=Apache Syncope ${syncope.version} WA
-spring.groovy.template.check-template-location=false
-spring.main.banner-mode=log
 
-server.port=8080
+LOGGER=error
 
-spring.http.encoding.charset=UTF-8
-spring.http.encoding.enabled=true
-spring.http.encoding.force=true
+autoHotswap=true
 
-server.servlet.contextPath=/syncope-wa
-
-##
-# Allow configuration classes to override bean definitions from Spring Boot
-#
-spring.main.allow-bean-definition-overriding=true
-spring.main.lazy-initialization=false
-
-service.discovery.address=http://localhost:8080/syncope-wa/
-
-# Conf directories
-conf.directory=${conf.directory}
-cas.standalone.configurationDirectory=${conf.directory}
-cas.authn.oidc.jwksFile=file:${conf.directory}/oidc.keystore
+extraClasspath=\
+${basedir}/../../wa/target/classes/org
diff --git a/sra/pom.xml b/sra/pom.xml
index 1139819..6644b0e 100644
--- a/sra/pom.xml
+++ b/sra/pom.xml
@@ -166,6 +166,7 @@ under the License.
         <directory>src/main/resources</directory>
         <filtering>true</filtering>
       </resource>
+
       <resource>
         <directory>${basedir}/../src/main/resources</directory>
         <filtering>true</filtering>
@@ -208,6 +209,11 @@ under the License.
           <artifactId>cxf-rt-transports-http-netty-server</artifactId>
           <scope>compile</scope>
         </dependency>
+
+        <dependency>
+          <groupId>org.springframework.boot</groupId>
+          <artifactId>spring-boot-devtools</artifactId>
+        </dependency>
       </dependencies>
 
       <build>
diff --git a/sra/src/main/java/org/apache/syncope/sra/SyncopeSRAApplication.java b/sra/src/main/java/org/apache/syncope/sra/SyncopeSRAApplication.java
index 5a2e05e..3f56eb4 100644
--- a/sra/src/main/java/org/apache/syncope/sra/SyncopeSRAApplication.java
+++ b/sra/src/main/java/org/apache/syncope/sra/SyncopeSRAApplication.java
@@ -19,6 +19,9 @@
 package org.apache.syncope.sra;
 
 import java.util.Objects;
+import org.apache.syncope.common.keymaster.client.api.model.NetworkService;
+import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStart;
+import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStop;
 import org.apache.syncope.common.lib.types.IdRepoEntitlement;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.boot.SpringApplication;
@@ -62,6 +65,16 @@ public class SyncopeSRAApplication implements EnvironmentAware {
     }
 
     @Bean
+    public KeymasterStart keymasterStart() {
+        return new KeymasterStart(NetworkService.Type.SRA);
+    }
+
+    @Bean
+    public KeymasterStop keymasterStop() {
+        return new KeymasterStop(NetworkService.Type.SRA);
+    }
+
+    @Bean
     public RouteLocator routes(final RouteLocatorBuilder builder) {
         return () -> Flux.fromIterable(provider.fetch()).map(Route.AbstractBuilder::build);
     }
diff --git a/sra/src/main/java/org/apache/syncope/sra/SyncopeSRAShutdown.java b/sra/src/main/java/org/apache/syncope/sra/SyncopeSRAShutdown.java
deleted file mode 100644
index 4ed772c..0000000
--- a/sra/src/main/java/org/apache/syncope/sra/SyncopeSRAShutdown.java
+++ /dev/null
@@ -1,33 +0,0 @@
-/*
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements.  See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership.  The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License.  You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied.  See the License for the
- * specific language governing permissions and limitations
- * under the License.
- */
-package org.apache.syncope.sra;
-
-import org.springframework.context.ApplicationListener;
-import org.springframework.context.event.ContextClosedEvent;
-import org.springframework.stereotype.Component;
-
-@Component
-public class SyncopeSRAShutdown extends SyncopeSRAStartStop
-        implements ApplicationListener<ContextClosedEvent> {
-
-    @Override
-    public void onApplicationEvent(final ContextClosedEvent event) {
-        serviceOps.unregister(getNetworkService());
-    }
-}
diff --git a/sra/src/main/java/org/apache/syncope/sra/SyncopeSRAStartStop.java b/sra/src/main/java/org/apache/syncope/sra/SyncopeSRAStartStop.java
deleted file mode 100644
index 926a608..0000000
--- a/sra/src/main/java/org/apache/syncope/sra/SyncopeSRAStartStop.java
+++ /dev/null
@@ -1,40 +0,0 @@
-/*
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements.  See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership.  The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License.  You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied.  See the License for the
- * specific language governing permissions and limitations
- * under the License.
- */
-package org.apache.syncope.sra;
-
-import org.apache.syncope.common.keymaster.client.api.ServiceOps;
-import org.apache.syncope.common.keymaster.client.api.model.NetworkService;
-import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.beans.factory.annotation.Value;
-
-abstract class SyncopeSRAStartStop {
-
-    @Autowired
-    protected ServiceOps serviceOps;
-
-    @Value("${service.discovery.address}")
-    private String address;
-
-    protected NetworkService getNetworkService() {
-        NetworkService ns = new NetworkService();
-        ns.setType(NetworkService.Type.SRA);
-        ns.setAddress(address);
-        return ns;
-    }
-}
diff --git a/wa/pom.xml b/wa/pom.xml
index 2bdb8b0..13d69aa 100644
--- a/wa/pom.xml
+++ b/wa/pom.xml
@@ -43,6 +43,18 @@ under the License.
 
   <dependencies>
     <dependency>
+      <groupId>org.apache.syncope.common.keymaster</groupId>
+      <artifactId>syncope-common-keymaster-client-api</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+
+    <dependency>
+      <groupId>org.apache.syncope.client.am</groupId>
+      <artifactId>syncope-client-am-lib</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+
+    <dependency>
       <groupId>org.glassfish</groupId>
       <artifactId>javax.el</artifactId>
     </dependency>
@@ -175,15 +187,30 @@ under the License.
     </dependency>
 
     <dependency>
+      <groupId>org.apache.syncope.common.keymaster</groupId>
+      <artifactId>syncope-common-keymaster-client-zookeeper</artifactId>
+      <version>${project.version}</version>
+      <scope>test</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.curator</groupId>
+      <artifactId>curator-test</artifactId>
+      <scope>test</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.springframework.boot</groupId>
+      <artifactId>spring-boot-starter-tomcat</artifactId>
+      <scope>test</scope>      
+    </dependency>
+    <dependency>
       <groupId>org.springframework.boot</groupId>
       <artifactId>spring-boot-starter-test</artifactId>
       <scope>test</scope>
-      <exclusions>
-        <exclusion>
-          <groupId>org.junit.vintage</groupId>
-          <artifactId>junit-vintage-engine</artifactId>
-        </exclusion>
-      </exclusions>
+    </dependency>
+    <dependency>
+      <groupId>org.junit.jupiter</groupId>
+      <artifactId>junit-jupiter</artifactId>
+      <scope>test</scope>
     </dependency>
   </dependencies>
 
@@ -209,24 +236,105 @@ under the License.
         </includes>
       </resource>
     </resources>
+
+    <testResources>
+      <testResource>
+        <directory>${basedir}/src/test/resources</directory>
+        <filtering>true</filtering>
+      </testResource>
+    </testResources>
   </build>
 
   <profiles>
     <profile>
       <id>debug</id>
 
+      <properties>
+        <skipTests>true</skipTests>
+      </properties>
+
       <dependencies>
         <dependency>
           <groupId>org.springframework.boot</groupId>
+          <artifactId>spring-boot-starter-undertow</artifactId>
+        </dependency>
+
+        <dependency>
+          <groupId>org.apache.syncope.common.keymaster</groupId>
+          <artifactId>syncope-common-keymaster-client-zookeeper</artifactId>
+          <version>${project.version}</version>
+          <scope>compile</scope>
+        </dependency>
+        <dependency>
+          <groupId>org.apache.curator</groupId>
+          <artifactId>curator-test</artifactId>
+          <scope>compile</scope>
+        </dependency>
+
+        <dependency>
+          <groupId>org.springframework.boot</groupId>
           <artifactId>spring-boot-devtools</artifactId>
         </dependency>
       </dependencies>
 
       <build>
-        <defaultGoal>clean package spring-boot:run</defaultGoal>
+        <defaultGoal>clean package io.fabric8:docker-maven-plugin:start spring-boot:run</defaultGoal>
 
         <plugins>
           <plugin>
+            <groupId>io.fabric8</groupId>
+            <artifactId>docker-maven-plugin</artifactId>
+            <configuration>
+              <images>
+                <image>
+                  <name>zookeeper:${zookeeper.version}</name>
+                  <run>
+                    <ports>
+                      <port>2181:2181</port>
+                    </ports>
+                    <volumes>
+                      <bind>
+                        <volume>${project.build.testOutputDirectory}/zoo.cfg:/conf/zoo.cfg</volume>
+                        <volume>${project.build.testOutputDirectory}/java.env:/conf/java.env</volume>
+                        <volume>${project.build.testOutputDirectory}/server-jaas.conf:/conf/server-jaas.conf</volume>
+                        <volume>${project.build.testOutputDirectory}/client-jaas.conf:/conf/client-jaas.conf</volume>
+                      </bind>
+                    </volumes>
+                  </run>
+                </image>
+              </images>
+            </configuration>
+          </plugin>
+
+          <plugin>
+            <groupId>org.codehaus.mojo</groupId>
+            <artifactId>build-helper-maven-plugin</artifactId>
+            <executions>
+              <execution>
+                <goals>
+                  <goal>add-source</goal>
+                </goals>
+                <configuration>
+                  <sources>
+                    <source>${basedir}/src/test/java</source>
+                  </sources>
+                </configuration>
+              </execution>
+            </executions>
+          </plugin>
+
+          <plugin>
+            <groupId>org.apache.maven.plugins</groupId>
+            <artifactId>maven-compiler-plugin</artifactId>
+            <configuration>
+              <excludes>
+                <exclude>**/org/apache/syncope/wa/**Test.java</exclude>
+                <exclude>**/org/apache/syncope/wa/**Zookeeper*.java</exclude>
+              </excludes>
+            </configuration>
+          </plugin>
+
+          <plugin>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-maven-plugin</artifactId>
             <configuration>
@@ -244,11 +352,16 @@ under the License.
         <resources>
           <resource>
             <directory>${basedir}/src/test/resources</directory>
-            <includes>
-              <include>application-debug.properties</include>
-            </includes>
+            <filtering>true</filtering>
           </resource>
         </resources>
+
+        <testResources>
+          <testResource>
+            <directory>${basedir}/../common/keymaster/client-zookeeper/src/main/resources</directory>
+            <filtering>true</filtering>
+          </testResource>
+        </testResources>
       </build>
     </profile>
 
diff --git a/wa/src/main/java/org/apache/syncope/wa/SyncopeWAApplication.java b/wa/src/main/java/org/apache/syncope/wa/SyncopeWAApplication.java
index 970d890..16d985d 100644
--- a/wa/src/main/java/org/apache/syncope/wa/SyncopeWAApplication.java
+++ b/wa/src/main/java/org/apache/syncope/wa/SyncopeWAApplication.java
@@ -19,6 +19,9 @@
 package org.apache.syncope.wa;
 
 import org.apache.commons.lang.StringUtils;
+import org.apache.syncope.common.keymaster.client.api.model.NetworkService;
+import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStart;
+import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStop;
 import org.apereo.cas.configuration.CasConfigurationProperties;
 import org.apereo.cas.util.AsciiArtUtils;
 import org.apereo.cas.util.DateTimeUtils;
@@ -41,12 +44,16 @@ import org.springframework.boot.builder.SpringApplicationBuilder;
 import org.springframework.boot.context.event.ApplicationReadyEvent;
 import org.springframework.boot.context.properties.EnableConfigurationProperties;
 import org.springframework.boot.web.servlet.support.SpringBootServletInitializer;
+import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.EnableAspectJAutoProxy;
+import org.springframework.context.annotation.PropertySource;
 import org.springframework.context.event.EventListener;
 import org.springframework.scheduling.annotation.EnableAsync;
 import org.springframework.scheduling.annotation.EnableScheduling;
 import org.springframework.transaction.annotation.EnableTransactionManagement;
 
+@PropertySource("classpath:wa.properties")
+@PropertySource(value = "file:${conf.directory}/wa.properties", ignoreResourceNotFound = true)
 @SpringBootApplication(exclude = {
     HibernateJpaAutoConfiguration.class,
     JerseyAutoConfiguration.class,
@@ -84,4 +91,14 @@ public class SyncopeWAApplication extends SpringBootServletInitializer {
         AsciiArtUtils.printAsciiArtReady(LOG, StringUtils.EMPTY);
         LOG.info("Ready to process requests @ [{}]", DateTimeUtils.zonedDateTimeOf(event.getTimestamp()));
     }
+
+    @Bean
+    public KeymasterStart keymasterStart() {
+        return new KeymasterStart(NetworkService.Type.WA);
+    }
+
+    @Bean
+    public KeymasterStop keymasterStop() {
+        return new KeymasterStop(NetworkService.Type.WA);
+    }
 }
diff --git a/wa/src/main/resources/application.properties b/wa/src/main/resources/application.properties
index 487d11b..53ae4b0 100644
--- a/wa/src/main/resources/application.properties
+++ b/wa/src/main/resources/application.properties
@@ -26,6 +26,9 @@ spring.http.encoding.force=true
 
 server.servlet.contextPath=/syncope-wa
 
+management.endpoints.web.exposure.include=health,loggers
+management.endpoint.health.show-details=always
+
 ##
 # Allow configuration classes to override bean definitions from Spring Boot
 #
@@ -33,8 +36,3 @@ spring.main.allow-bean-definition-overriding=true
 spring.main.lazy-initialization=false
 
 service.discovery.address=http://localhost:8080/syncope-wa/
-
-# Conf directories
-conf.directory=${conf.directory}
-cas.standalone.configurationDirectory=${conf.directory}
-cas.authn.oidc.jwksFile=file:${conf.directory}/oidc.keystore
diff --git a/wa/src/main/resources/log4j2.xml b/wa/src/main/resources/log4j2.xml
new file mode 100644
index 0000000..e184c60
--- /dev/null
+++ b/wa/src/main/resources/log4j2.xml
@@ -0,0 +1,68 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements.  See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership.  The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License.  You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied.  See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<configuration status="WARN">
+
+  <appenders>
+
+    <RollingRandomAccessFile name="main" fileName="${log.directory}/wa.log"
+                             filePattern="${log.directory}/wa-%d{yyyy-MM-dd}.log.gz"
+                             immediateFlush="false" append="true">
+      <PatternLayout>
+        <pattern>%d{HH:mm:ss.SSS} %-5level %logger - %msg%n</pattern>
+      </PatternLayout>
+      <Policies>
+        <TimeBasedTriggeringPolicy/>
+        <SizeBasedTriggeringPolicy size="250 MB"/>
+      </Policies>
+    </RollingRandomAccessFile>
+
+  </appenders>
+
+  <loggers>
+
+    <asyncLogger name="org.apereo.cas" additivity="false" level="INFO">
+      <appender-ref ref="main"/>
+    </asyncLogger>
+    <asyncLogger name="org.apereo.inspektr.audit.support" additivity="false" level="INFO">
+      <appender-ref ref="main"/>
+    </asyncLogger>
+
+    <asyncLogger name="org.springframework" additivity="false" level="INFO">
+      <appender-ref ref="main"/>
+    </asyncLogger>
+
+    <asyncLogger name="org.apache.syncope.client.lib" additivity="false" level="OFF">
+      <appender-ref ref="main"/>
+    </asyncLogger>
+    <asyncLogger name="org.apache.syncope.wa" additivity="false" level="INFO">
+      <appender-ref ref="main"/>
+    </asyncLogger>
+
+    <asyncLogger name="org.apache.cxf" additivity="false" level="ERROR">
+      <appender-ref ref="main"/>
+    </asyncLogger>
+
+    <root level="INFO">
+      <appender-ref ref="main"/>
+    </root>
+  
+  </loggers>
+  
+</configuration>
diff --git a/wa/src/main/resources/static/images/favicon.png b/wa/src/main/resources/static/images/favicon.png
new file mode 100644
index 0000000..aa2f3e2
Binary files /dev/null and b/wa/src/main/resources/static/images/favicon.png differ
diff --git a/wa/src/main/resources/templates/layout.html b/wa/src/main/resources/templates/layout.html
index 846f0d5..ad83fbc 100644
--- a/wa/src/main/resources/templates/layout.html
+++ b/wa/src/main/resources/templates/layout.html
@@ -24,7 +24,7 @@ under the License.
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
 
-    <title layout:title-pattern="$CONTENT_TITLE - $LAYOUT_TITLE">Apache Syncope</title>
+    <title layout:title-pattern="$LAYOUT_TITLE">Apache Syncope</title>
 
     <!--/* Core CAS CSS */-->
     <link rel="stylesheet" type="text/css" href="../static/css/normalize.css" th:href="@{#{webjars.normalize.css}}" />
@@ -33,7 +33,7 @@ under the License.
     <link rel="stylesheet" type="text/css" href="../static/css/mdi-font.css" th:href="@{#{webjars.mdi-font.css}}" />
     <link rel="stylesheet" type="text/css" href="../static/css/cas.css" th:href="@{${#themes.code('cas.standard.css.file')}}"/>
 
-    <link rel="icon" th:href="@{/favicon.ico}" type="image/x-icon"/>
+    <link rel="shortcut icon" th:href="@{'/images/favicon.png'}" type="image/png"/>
 </head>
 
 <body>
diff --git a/wa/src/main/resources/application.properties b/wa/src/main/resources/wa.properties
similarity index 64%
copy from wa/src/main/resources/application.properties
copy to wa/src/main/resources/wa.properties
index 487d11b..a208075 100644
--- a/wa/src/main/resources/application.properties
+++ b/wa/src/main/resources/wa.properties
@@ -14,25 +14,10 @@
 # KIND, either express or implied.  See the License for the
 # specific language governing permissions and limitations
 # under the License.
-spring.application.name=Apache Syncope ${syncope.version} WA
-spring.groovy.template.check-template-location=false
-spring.main.banner-mode=log
+anonymousUser=${anonymousUser}
+anonymousKey=${anonymousKey}
 
-server.port=8080
-
-spring.http.encoding.charset=UTF-8
-spring.http.encoding.enabled=true
-spring.http.encoding.force=true
-
-server.servlet.contextPath=/syncope-wa
-
-##
-# Allow configuration classes to override bean definitions from Spring Boot
-#
-spring.main.allow-bean-definition-overriding=true
-spring.main.lazy-initialization=false
-
-service.discovery.address=http://localhost:8080/syncope-wa/
+useGZIPCompression=true
 
 # Conf directories
 conf.directory=${conf.directory}
diff --git a/wa/src/test/java/org/apache/syncope/wa/SyncopeWATest.java b/wa/src/test/java/org/apache/syncope/wa/SyncopeWATest.java
new file mode 100644
index 0000000..c4ed578
--- /dev/null
+++ b/wa/src/test/java/org/apache/syncope/wa/SyncopeWATest.java
@@ -0,0 +1,158 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.syncope.wa;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNotEquals;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.stream.Stream;
+import javax.ws.rs.core.HttpHeaders;
+import org.apache.http.Consts;
+import org.apache.http.Header;
+import org.apache.http.HttpStatus;
+import org.apache.http.NameValuePair;
+import org.apache.http.client.entity.UrlEncodedFormEntity;
+import org.apache.http.client.methods.CloseableHttpResponse;
+import org.apache.http.client.methods.HttpGet;
+import org.apache.http.client.methods.HttpPost;
+import org.apache.http.client.protocol.HttpClientContext;
+import org.apache.http.impl.client.BasicCookieStore;
+import org.apache.http.impl.client.CloseableHttpClient;
+import org.apache.http.impl.client.HttpClients;
+import org.apache.http.message.BasicHeader;
+import org.apache.http.message.BasicNameValuePair;
+import org.apache.http.util.EntityUtils;
+import org.junit.jupiter.api.Test;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.web.server.LocalServerPort;
+import org.springframework.test.context.ContextConfiguration;
+
+@SpringBootTest(webEnvironment = SpringBootTest.WebEnvironment.RANDOM_PORT, properties = {
+    "cas.authn.accept.users=mrossi::password"
+})
+@ContextConfiguration(initializers = ZookeeperTestingServer.class)
+public class SyncopeWATest {
+
+    @LocalServerPort
+    private int port;
+
+    private String getLoginURL() {
+        return "http://localhost:" + port + "/syncope-wa/login";
+    }
+
+    @Test
+    public void loginLogout() throws IOException {
+        CloseableHttpClient httpclient = HttpClients.createDefault();
+        HttpClientContext context = HttpClientContext.create();
+        context.setCookieStore(new BasicCookieStore());
+
+        // 1. first GET to fetch execution
+        HttpGet get = new HttpGet(getLoginURL());
+        get.addHeader(new BasicHeader(HttpHeaders.ACCEPT_LANGUAGE, "en-US,en;q=0.5"));
+        CloseableHttpResponse response = httpclient.execute(get, context);
+        assertEquals(HttpStatus.SC_OK, response.getStatusLine().getStatusCode());
+
+        String responseBody = EntityUtils.toString(response.getEntity());
+        int begin = responseBody.indexOf("name=\"execution\" value=\"");
+        assertNotEquals(-1, begin);
+        int end = responseBody.indexOf("\"/><input type=\"hidden\" name=\"_eventId\"");
+        assertNotEquals(-1, end);
+
+        String execution = responseBody.substring(begin + 24, end);
+        assertNotNull(execution);
+
+        // 2. then POST to authenticate
+        List<NameValuePair> form = new ArrayList<>();
+        form.add(new BasicNameValuePair("_eventId", "submit"));
+        form.add(new BasicNameValuePair("execution", execution));
+        form.add(new BasicNameValuePair("username", "mrossi"));
+        form.add(new BasicNameValuePair("password", "password"));
+        form.add(new BasicNameValuePair("geolocation", ""));
+
+        HttpPost post = new HttpPost(getLoginURL());
+        post.addHeader(new BasicHeader(HttpHeaders.ACCEPT_LANGUAGE, "en-US,en;q=0.5"));
+        post.setEntity(new UrlEncodedFormEntity(form, Consts.UTF_8));
+        response = httpclient.execute(post, context);
+
+        // 3. check authentication results
+        assertEquals(HttpStatus.SC_OK, response.getStatusLine().getStatusCode());
+
+        Header[] cookie = response.getHeaders("Set-Cookie");
+        assertNotNull(cookie);
+        assertTrue(cookie.length > 0);
+        assertEquals(1, Stream.of(cookie).filter(item -> item.getValue().startsWith("TGC")).count());
+
+        String body = EntityUtils.toString(response.getEntity());
+        assertTrue(body.contains("Log In Successful"));
+        assertTrue(body.contains("have successfully logged into the Central Authentication Service"));
+
+        // 4. logout
+        HttpGet logout = new HttpGet(getLoginURL().replace("login", "logout"));
+        logout.addHeader(new BasicHeader(HttpHeaders.ACCEPT_LANGUAGE, "en-US,en;q=0.5"));
+        response = httpclient.execute(logout, context);
+        assertEquals(HttpStatus.SC_OK, response.getStatusLine().getStatusCode());
+
+        body = EntityUtils.toString(response.getEntity());
+        assertTrue(body.contains("Logout successful"));
+        assertTrue(body.contains("have successfully logged out of the Central Authentication Service"));
+    }
+
+    @Test
+    public void loginError() throws IOException {
+        CloseableHttpClient httpclient = HttpClients.createDefault();
+        HttpClientContext context = HttpClientContext.create();
+        context.setCookieStore(new BasicCookieStore());
+
+        // 1. first GET to fetch execution
+        HttpGet get = new HttpGet(getLoginURL());
+        get.addHeader(new BasicHeader(HttpHeaders.ACCEPT_LANGUAGE, "en-US,en;q=0.5"));
+        CloseableHttpResponse response = httpclient.execute(get, context);
+        assertEquals(HttpStatus.SC_OK, response.getStatusLine().getStatusCode());
+
+        String responseBody = EntityUtils.toString(response.getEntity());
+        int begin = responseBody.indexOf("name=\"execution\" value=\"");
+        assertNotEquals(-1, begin);
+        int end = responseBody.indexOf("\"/><input type=\"hidden\" name=\"_eventId\"");
+        assertNotEquals(-1, end);
+
+        String execution = responseBody.substring(begin + 24, end);
+        assertNotNull(execution);
+
+        // 2. then POST to authenticate
+        List<NameValuePair> form = new ArrayList<>();
+        form.add(new BasicNameValuePair("_eventId", "submit"));
+        form.add(new BasicNameValuePair("execution", execution));
+        form.add(new BasicNameValuePair("username", "mrossi"));
+        form.add(new BasicNameValuePair("password", "WRONG"));
+        form.add(new BasicNameValuePair("geolocation", ""));
+
+        HttpPost post = new HttpPost(getLoginURL());
+        post.addHeader(new BasicHeader(HttpHeaders.ACCEPT_LANGUAGE, "en-US,en;q=0.5"));
+        post.setEntity(new UrlEncodedFormEntity(form, Consts.UTF_8));
+        response = httpclient.execute(post, context);
+
+        // 3. check authentication results
+        assertEquals(HttpStatus.SC_UNAUTHORIZED, response.getStatusLine().getStatusCode());
+    }
+}
diff --git a/wa/src/test/java/org/apache/syncope/wa/ZookeeperTestingServer.java b/wa/src/test/java/org/apache/syncope/wa/ZookeeperTestingServer.java
new file mode 100644
index 0000000..956e6f3
--- /dev/null
+++ b/wa/src/test/java/org/apache/syncope/wa/ZookeeperTestingServer.java
@@ -0,0 +1,80 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.syncope.wa;
+
+import static org.junit.jupiter.api.Assertions.fail;
+
+import java.io.InputStream;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Properties;
+import java.util.concurrent.atomic.AtomicReference;
+import javax.security.auth.login.AppConfigurationEntry;
+import javax.security.auth.login.Configuration;
+import org.apache.curator.test.InstanceSpec;
+import org.apache.curator.test.TestingServer;
+import org.apache.zookeeper.server.auth.DigestLoginModule;
+import org.apache.zookeeper.server.auth.SASLAuthenticationProvider;
+import org.springframework.context.ApplicationContextInitializer;
+import org.springframework.context.ConfigurableApplicationContext;
+
+public class ZookeeperTestingServer implements ApplicationContextInitializer<ConfigurableApplicationContext> {
+
+    @Override
+    public void initialize(final ConfigurableApplicationContext ctx) {
+        AtomicReference<String> username = new AtomicReference<>();
+        AtomicReference<String> password = new AtomicReference<>();
+        try (InputStream propStream = getClass().getResourceAsStream("/keymaster.properties")) {
+            Properties props = new Properties();
+            props.load(propStream);
+
+            username.set(props.getProperty("keymaster.username"));
+            password.set(props.getProperty("keymaster.password"));
+        } catch (Exception e) {
+            throw new IllegalStateException("Could not load /keymaster.properties", e);
+        }
+
+        Configuration.setConfiguration(new Configuration() {
+
+            private final AppConfigurationEntry[] entries = {
+                new AppConfigurationEntry(
+                DigestLoginModule.class.getName(),
+                AppConfigurationEntry.LoginModuleControlFlag.REQUIRED,
+                Map.of(
+                "user_" + username.get(), password.get()
+                ))
+            };
+
+            @Override
+            public AppConfigurationEntry[] getAppConfigurationEntry(final String name) {
+                return entries;
+            }
+        });
+
+        Map<String, Object> customProperties = new HashMap<>();
+        customProperties.put("authProvider.1", SASLAuthenticationProvider.class.getName());
+        InstanceSpec spec = new InstanceSpec(null, 2181, -1, -1, true, 1, -1, -1, customProperties);
+
+        try {
+            new TestingServer(spec, true);
+        } catch (Exception e) {
+            fail(e);
+        }
+    }
+}
diff --git a/wa/src/main/resources/application.properties b/wa/src/test/resources/keymaster.properties
similarity index 52%
copy from wa/src/main/resources/application.properties
copy to wa/src/test/resources/keymaster.properties
index 487d11b..f374d8c 100644
--- a/wa/src/main/resources/application.properties
+++ b/wa/src/test/resources/keymaster.properties
@@ -14,27 +14,6 @@
 # KIND, either express or implied.  See the License for the
 # specific language governing permissions and limitations
 # under the License.
-spring.application.name=Apache Syncope ${syncope.version} WA
-spring.groovy.template.check-template-location=false
-spring.main.banner-mode=log
-
-server.port=8080
-
-spring.http.encoding.charset=UTF-8
-spring.http.encoding.enabled=true
-spring.http.encoding.force=true
-
-server.servlet.contextPath=/syncope-wa
-
-##
-# Allow configuration classes to override bean definitions from Spring Boot
-#
-spring.main.allow-bean-definition-overriding=true
-spring.main.lazy-initialization=false
-
-service.discovery.address=http://localhost:8080/syncope-wa/
-
-# Conf directories
-conf.directory=${conf.directory}
-cas.standalone.configurationDirectory=${conf.directory}
-cas.authn.oidc.jwksFile=file:${conf.directory}/oidc.keystore
+keymaster.address=127.0.0.1:2181
+keymaster.username=${anonymousUser}
+keymaster.password=${anonymousKey}


[syncope] 03/07: [SYNCOPE-1545] fit/wa-reference + inclusion in standalone

Posted by il...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

ilgrosso pushed a commit to branch SYNCOPE-1545
in repository https://gitbox.apache.org/repos/asf/syncope.git

commit dd5bed66764f72f1437e8f710fdf269435958300
Author: Francesco Chicchiriccò <il...@apache.org>
AuthorDate: Tue Mar 3 17:28:49 2020 +0100

    [SYNCOPE-1545] fit/wa-reference + inclusion in standalone
---
 fit/pom.xml                                        |   1 +
 fit/wa-reference/pom.xml                           | 181 +++++++++++++++++++++
 .../main/resources/application-embedded.properties |  18 ++
 fit/wa-reference/src/main/resources/log4j2.xml     | 134 +++++++++++++++
 fit/wa-reference/src/main/webapp/WEB-INF/web.xml   |  29 ++++
 standalone/pom.xml                                 |  75 ++++++---
 wa/src/main/resources/templates/layout.html        |  61 +++++++
 7 files changed, 472 insertions(+), 27 deletions(-)

diff --git a/fit/pom.xml b/fit/pom.xml
index 5df60e1..30d9912 100644
--- a/fit/pom.xml
+++ b/fit/pom.xml
@@ -81,6 +81,7 @@ under the License.
     <module>core-reference</module>
     <module>console-reference</module>
     <module>enduser-reference</module>
+    <module>wa-reference</module>
   </modules>
 
 </project>
diff --git a/fit/wa-reference/pom.xml b/fit/wa-reference/pom.xml
new file mode 100644
index 0000000..7c08b20
--- /dev/null
+++ b/fit/wa-reference/pom.xml
@@ -0,0 +1,181 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements.  See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership.  The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License.  You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied.  See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+
+  <modelVersion>4.0.0</modelVersion>
+
+  <parent>
+    <groupId>org.apache.syncope</groupId>
+    <artifactId>syncope-fit</artifactId>
+    <version>3.0.0-SNAPSHOT</version>
+  </parent>
+
+  <name>Apache Syncope FIT WA Reference</name>
+  <description>Apache Syncope FIT WA Reference</description>
+  <groupId>org.apache.syncope.fit</groupId>
+  <artifactId>syncope-fit-wa-reference</artifactId>
+  <packaging>war</packaging>
+  
+  <properties>
+    <guava.version>28.2-jre</guava.version>
+    <opensaml.version>3.4.5</opensaml.version>
+    <bootstrap.version>4.4.1</bootstrap.version>
+    <slf4j.version>2.0.0-alpha1</slf4j.version>
+
+    <ianal.skip>true</ianal.skip>
+
+    <rootpom.basedir>${basedir}/../..</rootpom.basedir>
+  </properties>
+
+  <dependencies>
+    <dependency>
+      <groupId>org.apache.syncope</groupId>
+      <artifactId>syncope-wa</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+  </dependencies>
+
+  <build>
+    <plugins>
+      <plugin>
+        <groupId>org.codehaus.cargo</groupId>
+        <artifactId>cargo-maven2-plugin</artifactId>
+        <inherited>true</inherited>
+        <configuration>
+          <container>
+            <containerId>tomcat9x</containerId>
+            <zipUrlInstaller>
+              <url>https://repo1.maven.org/maven2/org/apache/tomcat/tomcat/${tomcat.version}/tomcat-${tomcat.version}.zip</url>
+              <downloadDir>${settings.localRepository}/org/codehaus/cargo/cargo-container-archives</downloadDir>
+              <extractDir>${project.build.directory}/cargo/extract</extractDir>
+            </zipUrlInstaller>
+            <timeout>300000</timeout>
+            <log>${cargo.log}</log>
+            <output>${cargo.output}</output>
+          </container>
+          <configuration>
+            <properties>
+              <cargo.jvmargs>
+                -Dspring.profiles.active=embedded
+                -XX:+CMSClassUnloadingEnabled -Xmx1024m -Xms512m</cargo.jvmargs>
+            </properties>
+          </configuration>
+          <deployables>
+            <deployable>
+              <location>${project.build.directory}/${project.build.finalName}</location>
+              <properties>
+                <context>syncope-wa</context>
+              </properties>
+            </deployable>
+          </deployables>
+        </configuration>
+      </plugin>
+      
+      <plugin>
+        <groupId>org.apache.maven.plugins</groupId>
+        <artifactId>maven-checkstyle-plugin</artifactId>
+        <configuration>
+          <resourceIncludes>src/main/resources/**/*.properties</resourceIncludes>
+        </configuration>
+      </plugin>
+    </plugins>
+    
+    <resources>
+      <resource>
+        <directory>src/main/resources</directory>
+        <filtering>true</filtering>
+      </resource>
+    </resources>
+    <testResources>
+      <testResource>
+        <directory>src/test/resources</directory>
+        <filtering>true</filtering>
+      </testResource>
+    </testResources>
+  </build>
+  
+  <profiles>
+    <profile>
+      <id>properties4cas</id>
+      <activation>
+        <activeByDefault>true</activeByDefault>
+      </activation>
+    </profile>
+
+    <profile>
+      <id>skipTests</id>
+    </profile>
+
+    <profile>
+      <id>debug</id>
+
+      <properties>
+        <skipTests>true</skipTests>
+      </properties>
+
+      <build>
+        <defaultGoal>clean verify cargo:run</defaultGoal>
+        
+        <plugins>
+          <plugin>
+            <groupId>org.codehaus.cargo</groupId>
+            <artifactId>cargo-maven2-plugin</artifactId>
+            <inherited>true</inherited>
+            <configuration>
+              <configuration>
+                <properties>
+                  <cargo.jvmargs>
+                    -Dspring.profiles.active=embedded
+                    -Xdebug -Djaxb.debug=true -Xrunjdwp:transport=dt_socket,address=8000,server=y,suspend=n
+                    -XX:+CMSClassUnloadingEnabled -XX:+UseG1GC -Xmx1024m -Xms512m</cargo.jvmargs>
+                </properties>
+              </configuration>
+            </configuration>
+          </plugin>
+        </plugins>
+      </build>
+    </profile>
+
+    <profile>
+      <id>apache-release</id>
+
+      <build>
+        <plugins>
+          <plugin>
+            <groupId>org.apache.maven.plugins</groupId>
+            <artifactId>maven-deploy-plugin</artifactId>
+            <configuration>
+              <skip>true</skip>
+            </configuration>
+          </plugin>
+          <plugin>
+            <groupId>org.apache.maven.plugins</groupId>
+            <artifactId>maven-source-plugin</artifactId>
+            <inherited>false</inherited>
+            <configuration>
+              <skipSource>true</skipSource>
+            </configuration>
+          </plugin>
+        </plugins>
+      </build>
+    </profile>
+
+  </profiles>
+</project>
diff --git a/fit/wa-reference/src/main/resources/application-embedded.properties b/fit/wa-reference/src/main/resources/application-embedded.properties
new file mode 100644
index 0000000..464c8c8
--- /dev/null
+++ b/fit/wa-reference/src/main/resources/application-embedded.properties
@@ -0,0 +1,18 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+spring.main.banner-mode=console
+service.discovery.address=http://localhost:9080/syncope-wa/
diff --git a/fit/wa-reference/src/main/resources/log4j2.xml b/fit/wa-reference/src/main/resources/log4j2.xml
new file mode 100644
index 0000000..08196df
--- /dev/null
+++ b/fit/wa-reference/src/main/resources/log4j2.xml
@@ -0,0 +1,134 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements.  See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership.  The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License.  You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied.  See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<!-- Specify the refresh internal in seconds. -->
+<Configuration monitorInterval="5" packages="org.apereo.cas.logging">
+  <Properties>
+    <Property name="baseDir">${log.directory}</Property>
+    <Property name="cas.log.level">info</Property>
+    <Property name="spring.webflow.log.level">warn</Property>
+    <Property name="spring.security.log.level">info</Property>
+    <Property name="spring.cloud.log.level">warn</Property>
+    <Property name="spring.web.log.level">warn</Property>
+    <Property name="spring.boot.log.level">warn</Property>
+    <Property name="ldap.log.level">warn</Property>
+    <Property name="pac4j.log.level">warn</Property>
+    <Property name="opensaml.log.level">warn</Property>
+    <Property name="hazelcast.log.level">warn</Property>
+  </Properties>
+  <Appenders>
+    <RollingFile name="file" fileName="${baseDir}/wa.log" append="true"
+                 filePattern="${baseDir}/wa-%d{yyyy-MM-dd-HH}-%i.log">
+      <PatternLayout pattern="%highlight{%d %p [%c] - &lt;%m&gt;%n}" />
+      <Policies>
+        <OnStartupTriggeringPolicy />
+        <SizeBasedTriggeringPolicy size="10 MB"/>
+        <TimeBasedTriggeringPolicy />
+      </Policies>
+      <DefaultRolloverStrategy max="5" compressionLevel="9">
+        <Delete basePath="${baseDir}" maxDepth="2">
+          <IfFileName glob="*/*.log.gz" />
+          <IfLastModified age="7d" />
+        </Delete>
+      </DefaultRolloverStrategy>
+    </RollingFile>
+    <RollingFile name="auditlogfile" fileName="${baseDir}/wa-audit.log" append="true"
+                 filePattern="${baseDir}/wa-audit-%d{yyyy-MM-dd-HH}-%i.log">
+      <PatternLayout pattern="%highlight{%d %p [%c] - %m%n}" />
+      <Policies>
+        <OnStartupTriggeringPolicy />
+        <SizeBasedTriggeringPolicy size="10 MB"/>
+        <TimeBasedTriggeringPolicy />
+      </Policies>
+      <DefaultRolloverStrategy max="5" compressionLevel="9">
+        <Delete basePath="${baseDir}" maxDepth="2">
+          <IfFileName glob="*/*.log.gz" />
+          <IfLastModified age="7d" />
+        </Delete>
+      </DefaultRolloverStrategy>
+    </RollingFile>
+
+    <CasAppender name="casAudit">
+      <AppenderRef ref="auditlogfile" />
+    </CasAppender>
+    <CasAppender name="casFile">
+      <AppenderRef ref="file" />
+    </CasAppender>
+  </Appenders>
+  <Loggers>
+    <AsyncLogger name="org.apereo.cas" level="${sys:cas.log.level}" includeLocation="true" />
+    <AsyncLogger name="org.apereo.cas.services" level="${sys:cas.log.level}" includeLocation="true" />
+    <AsyncLogger name="org.apereo.spring" level="${sys:cas.log.level}" includeLocation="true" />
+    <AsyncLogger name="org.apereo.services.persondir" level="${sys:cas.log.level}" includeLocation="true" />
+    <AsyncLogger name="org.apereo.cas.web.flow" level="${sys:cas.log.level}" includeLocation="true" />
+    <AsyncLogger name="org.apereo.cas.web.CasWebApplication" level="${sys:cas.log.level}" includeLocation="true"/>
+
+    <AsyncLogger name="org.apereo.inspektr.audit.support" additivity="true" level="info" includeLocation="true">
+      <AppenderRef ref="casAudit"/>
+    </AsyncLogger>
+
+    <AsyncLogger name="org.springframework.boot" level="${sys:spring.boot.log.level}" />
+    <AsyncLogger name="org.springframework.boot.context.embedded" level="info" />
+    <AsyncLogger name="org.springframework.boot.autoconfigure.security.servlet.UserDetailsServiceAutoConfiguration" level="${sys:spring.security.log.level}" />
+    <AsyncLogger name="org.springframework.boot.autoconfigure.security" level="${sys:spring.security.log.level}" />
+    <AsyncLogger name="org.springframework.boot.devtools" level="debug" />
+        
+    <AsyncLogger name="org.springframework" level="warn" includeLocation="true" />
+    <AsyncLogger name="org.springframework.webflow" level="${sys:spring.webflow.log.level}" includeLocation="true"/>
+    <AsyncLogger name="org.springframework.aop" level="warn" includeLocation="true" />
+    <AsyncLogger name="org.springframework.session" level="warn" includeLocation="true"/>
+    <AsyncLogger name="org.springframework.scheduling" level="info" includeLocation="true"/>
+    <AsyncLogger name="org.springframework.cloud.vault" level="warn" includeLocation="true" />
+    <AsyncLogger name="org.springframework.web.client" level="warn" includeLocation="true" />
+    <AsyncLogger name="org.springframework.security" level="${sys:spring.security.log.level}" includeLocation="true"/>
+    <AsyncLogger name="org.springframework.cloud" level="${sys:spring.cloud.log.level}" includeLocation="true"/>
+    <AsyncLogger name="org.springframework.amqp" level="error" />
+    <AsyncLogger name="org.springframework.integration" level="warn" includeLocation="true"/>
+    <AsyncLogger name="org.springframework.messaging" level="warn" includeLocation="true"/>
+    <AsyncLogger name="org.springframework.web" level="${sys:spring.web.log.level}" includeLocation="true"/>
+    <AsyncLogger name="org.springframework.orm.jpa" level="warn" includeLocation="true"/>
+    <AsyncLogger name="org.springframework.scheduling" level="warn" includeLocation="true"/>
+    <AsyncLogger name="org.springframework.context.annotation" level="off" includeLocation="true"/>
+    <AsyncLogger name="org.springframework.web.socket" level="warn" includeLocation="true"/>
+    <AsyncLogger name="org.springframework.boot.diagnostics.LoggingFailureAnalysisReporter" level="trace" includeLocation="true"/>
+
+    <AsyncLogger name="com.couchbase" level="warn" includeLocation="true" />
+    <AsyncLogger name="org.apache" level="error" includeLocation="true"/>
+    <AsyncLogger name="com.netflix" level="warn" includeLocation="true"/>
+    <AsyncLogger name="org.quartz" level="warn" includeLocation="true"/>
+    <AsyncLogger name="org.thymeleaf" level="warn" includeLocation="true"/>
+    <AsyncLogger name="org.pac4j" level="${sys:pac4j.log.level}" includeLocation="true"/>
+
+    <AsyncLogger name="org.opensaml" level="${sys:opensaml.log.level}" includeLocation="true"/>
+    <AsyncLogger name="PROTOCOL_MESSAGE" level="${sys:opensaml.log.level}" includeLocation="true" />
+
+    <AsyncLogger name="net.sf.ehcache" level="warn" includeLocation="true"/>
+    <AsyncLogger name="net.jradius" level="warn" includeLocation="true"/>
+    <AsyncLogger name="org.openid4java" level="warn" includeLocation="true"/>
+    <AsyncLogger name="org.ldaptive" level="${sys:ldap.log.level}" includeLocation="true"/>
+    <AsyncLogger name="com.hazelcast" level="${sys:hazelcast.log.level}" includeLocation="true"/>
+    <AsyncLogger name="org.jasig.spring" level="warn" includeLocation="true"/>
+    <AsyncLogger name="org.apache.cxf" level="warn" includeLocation="true"/>
+    <AsyncLogger name="org.apache.http" level="warn" includeLocation="true"/>
+
+    <AsyncRoot level="warn">
+      <AppenderRef ref="casFile"/>
+    </AsyncRoot>
+  </Loggers>
+</Configuration>
diff --git a/fit/wa-reference/src/main/webapp/WEB-INF/web.xml b/fit/wa-reference/src/main/webapp/WEB-INF/web.xml
new file mode 100644
index 0000000..34b536e
--- /dev/null
+++ b/fit/wa-reference/src/main/webapp/WEB-INF/web.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements.  See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership.  The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License.  You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied.  See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee
+                             http://xmlns.jcp.org/xml/ns/javaee/web-app_4_0.xsd"
+         version="4.0"
+         metadata-complete="true">
+
+  <display-name>Apache Syncope ${syncope.version} WA</display-name>
+
+</web-app>
diff --git a/standalone/pom.xml b/standalone/pom.xml
index 1fee6ac..45d71fd 100644
--- a/standalone/pom.xml
+++ b/standalone/pom.xml
@@ -73,6 +73,13 @@ under the License.
       <type>war</type>
       <scope>test</scope>
     </dependency>
+    <dependency>
+      <groupId>org.apache.syncope.fit</groupId>
+      <artifactId>syncope-fit-wa-reference</artifactId>
+      <version>${project.version}</version>
+      <type>war</type>
+      <scope>test</scope>
+    </dependency>
   </dependencies>
 
   <build>
@@ -116,68 +123,76 @@ under the License.
             <phase>verify</phase>
             <configuration>
               <target>
-                <mkdir dir="${work.dir}" />
+                <mkdir dir="${work.dir}"/>
 
                 <!-- legal stuff -->
-                <copy file="${project.build.outputDirectory}/README" todir="${work.dir}" />
-                <copy file="LICENSE" todir="${work.dir}" />
-                <copy file="NOTICE" todir="${work.dir}" />
+                <copy file="${project.build.outputDirectory}/README" todir="${work.dir}"/>
+                <copy file="LICENSE" todir="${work.dir}"/>
+                <copy file="NOTICE" todir="${work.dir}"/>
 
                 <!-- Unzip Tomcat and remove docs and examples from webapps (space saving) -->
-                <unzip src="${settings.localRepository}/org/codehaus/cargo/cargo-container-archives/tomcat-${tomcat.version}.zip" dest="${work.dir}" />
-                <delete dir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/docs" />
-                <delete dir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/examples" />
+                <unzip src="${settings.localRepository}/org/codehaus/cargo/cargo-container-archives/tomcat-${tomcat.version}.zip" dest="${work.dir}"/>
+                <delete dir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/docs"/>
+                <delete dir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/examples"/>
 
                 <!-- Syncope core -->
                 <copy todir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope">
-                  <fileset dir="../fit/core-reference/target/syncope-fit-core-reference-${project.version}" includes="**/*" />
+                  <fileset dir="../fit/core-reference/target/syncope-fit-core-reference-${project.version}" includes="**/*"/>
                 </copy>
                 <copy todir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope/WEB-INF/classes" overwrite="true">
-                  <fileset dir="${project.build.outputDirectory}/core" />
+                  <fileset dir="${project.build.outputDirectory}/core"/>
                 </copy>
-                <copy file="../fit/core-reference/target/test-classes/keystore" todir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope/WEB-INF/classes" overwrite="true" />
+                <copy file="../fit/core-reference/target/test-classes/keystore" todir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope/WEB-INF/classes" overwrite="true"/>
 
                 <!-- Syncope console -->
                 <copy todir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope-console">
-                  <fileset dir="../fit/console-reference/target/syncope-fit-console-reference-${project.version}" includes="**/*" />
+                  <fileset dir="../fit/console-reference/target/syncope-fit-console-reference-${project.version}" includes="**/*"/>
                 </copy>
                 <copy todir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope-console/WEB-INF/classes" overwrite="true">
-                  <fileset dir="${project.build.outputDirectory}/console" />
+                  <fileset dir="${project.build.outputDirectory}/console"/>
                 </copy>
 
                 <!-- Syncope enduser -->
                 <copy todir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope-enduser">
-                  <fileset dir="../fit/enduser-reference/target/syncope-fit-enduser-reference-${project.version}" includes="**/*" />
+                  <fileset dir="../fit/enduser-reference/target/syncope-fit-enduser-reference-${project.version}" includes="**/*"/>
                 </copy>
                 <copy todir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope-enduser/WEB-INF/classes" overwrite="true">
-                  <fileset dir="${project.build.outputDirectory}/enduser" />
+                  <fileset dir="${project.build.outputDirectory}/enduser"/>
+                </copy>f
+
+                <!-- Syncope wa -->
+                <copy todir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope-wa">
+                  <fileset dir="../fit/wa-reference/target/syncope-fit-wa-reference-${project.version}" includes="**/*"/>
+                </copy>
+                <copy todir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope-wa/WEB-INF/classes" overwrite="true">
+                  <fileset dir="${project.build.outputDirectory}/wa"/>
                 </copy>
 
-                <mkdir dir="${work.dir}/apache-tomcat-${tomcat.version}/${test.csvdir.path}" />
-                <copy file="../fit/core-reference/src/test/resources/test.csv" todir="${work.dir}/apache-tomcat-${tomcat.version}/${test.csvdir.path}" />
+                <mkdir dir="${work.dir}/apache-tomcat-${tomcat.version}/${test.csvdir.path}"/>
+                <copy file="../fit/core-reference/src/test/resources/test.csv" todir="${work.dir}/apache-tomcat-${tomcat.version}/${test.csvdir.path}"/>
 
                 <!-- Syncope build tools (provide H2, Apache DS and REST / SOAP resources + ConnId connector server) -->
                 <copy todir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope-fit-build-tools">
-                  <fileset dir="../fit/build-tools/target/syncope-fit-build-tools-${project.version}" includes="**/*" />
+                  <fileset dir="../fit/build-tools/target/syncope-fit-build-tools-${project.version}" includes="**/*"/>
                 </copy>
                 <copy todir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope-fit-build-tools/WEB-INF/lib">
-                  <fileset dir="../fit/core-reference/target/bundles/" includes="**/*" />
+                  <fileset dir="../fit/core-reference/target/bundles/" includes="**/*"/>
                 </copy>
 
                 <!-- Tomcat shared libraries: H2, StAX2 API, Woodstox -->
-                <copy file="${settings.localRepository}/com/h2database/h2/${h2.version}/h2-${h2.version}.jar" todir="${work.dir}/apache-tomcat-${tomcat.version}/lib" />
+                <copy file="${settings.localRepository}/com/h2database/h2/${h2.version}/h2-${h2.version}.jar" todir="${work.dir}/apache-tomcat-${tomcat.version}/lib"/>
                 <copy todir="${work.dir}/apache-tomcat-${tomcat.version}/lib">
-                  <fileset dir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope/WEB-INF/lib" includes="stax2-api-*.jar" />
-                  <fileset dir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope/WEB-INF/lib" includes="woodstox-core-asl-*.jar" />
+                  <fileset dir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope/WEB-INF/lib" includes="stax2-api-*.jar"/>
+                  <fileset dir="${work.dir}/apache-tomcat-${tomcat.version}/webapps/syncope/WEB-INF/lib" includes="woodstox-core-asl-*.jar"/>
                 </copy>
 
                 <!-- Other custom Tomcat resources -->
-                <copy file="${project.build.outputDirectory}/context.xml" todir="${work.dir}/apache-tomcat-${tomcat.version}/conf" overwrite="true" />
-                <copy file="src/main/resources/setenv.sh" todir="${work.dir}/apache-tomcat-${tomcat.version}/bin" />
-                <copy file="src/main/resources/setenv.bat" todir="${work.dir}/apache-tomcat-${tomcat.version}/bin" />
-                <replace file="${work.dir}/apache-tomcat-${tomcat.version}/conf/server.xml" token="8080" value="${cargo.servlet.port}" />
-                <replace file="${work.dir}/apache-tomcat-${tomcat.version}/conf/server.xml" token="8009" value="${cargo.tomcat.ajp.port}" />
-                <replace file="${work.dir}/apache-tomcat-${tomcat.version}/conf/server.xml" token="8005" value="${cargo.rmi.port}" />
+                <copy file="${project.build.outputDirectory}/context.xml" todir="${work.dir}/apache-tomcat-${tomcat.version}/conf" overwrite="true"/>
+                <copy file="src/main/resources/setenv.sh" todir="${work.dir}/apache-tomcat-${tomcat.version}/bin"/>
+                <copy file="src/main/resources/setenv.bat" todir="${work.dir}/apache-tomcat-${tomcat.version}/bin"/>
+                <replace file="${work.dir}/apache-tomcat-${tomcat.version}/conf/server.xml" token="8080" value="${cargo.servlet.port}"/>
+                <replace file="${work.dir}/apache-tomcat-${tomcat.version}/conf/server.xml" token="8009" value="${cargo.tomcat.ajp.port}"/>
+                <replace file="${work.dir}/apache-tomcat-${tomcat.version}/conf/server.xml" token="8005" value="${cargo.rmi.port}"/>
               </target>
             </configuration>
           </execution>
@@ -276,6 +291,12 @@ under the License.
       </resource>
 
       <resource>
+        <directory>../fit/wa-reference/src/main/resources</directory>
+        <targetPath>wa</targetPath>
+        <filtering>true</filtering>
+      </resource>
+
+      <resource>
         <directory>src/main/resources</directory>
       </resource>
       <resource>
diff --git a/wa/src/main/resources/templates/layout.html b/wa/src/main/resources/templates/layout.html
new file mode 100644
index 0000000..846f0d5
--- /dev/null
+++ b/wa/src/main/resources/templates/layout.html
@@ -0,0 +1,61 @@
+<!DOCTYPE html>
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements.  See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership.  The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License.  You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied.  See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<html xmlns:layout="http://www.ultraq.net.nz/thymeleaf/layout">
+
+<head>
+    <meta charset="UTF-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
+
+    <title layout:title-pattern="$CONTENT_TITLE - $LAYOUT_TITLE">Apache Syncope</title>
+
+    <!--/* Core CAS CSS */-->
+    <link rel="stylesheet" type="text/css" href="../static/css/normalize.css" th:href="@{#{webjars.normalize.css}}" />
+    <link rel="stylesheet" type="text/css" href="../static/css/bootstrap-grid.min.css" th:href="@{#{webjars.bootstrap-grid.css}}" />
+    <link rel="stylesheet" type="text/css" href="../static/css/material-components-web.min.css" th:href="@{#{webjars.material-components.css}}" />
+    <link rel="stylesheet" type="text/css" href="../static/css/mdi-font.css" th:href="@{#{webjars.mdi-font.css}}" />
+    <link rel="stylesheet" type="text/css" href="../static/css/cas.css" th:href="@{${#themes.code('cas.standard.css.file')}}"/>
+
+    <link rel="icon" th:href="@{/favicon.ico}" type="image/x-icon"/>
+</head>
+
+<body>
+<script th:replace="fragments/scripts" />
+
+<div th:replace="fragments/header :: header">
+    <a href="fragments/header.html">Header</a> fragment will go here
+</div>
+
+<div class="mdc-drawer-scrim"></div>
+
+<div class="mdc-drawer-app-content mdc-top-app-bar--fixed-adjust d-flex justify-content-center">
+    <main role="main" id="main-content" class="container-lg py-4">
+        <div layout:fragment="content" id="content">
+            CAS content will go here
+        </div>
+    </main>
+</div>
+
+<div th:replace="fragments/footer :: footer">
+    <a href="fragments/footer.html">Footer</a> fragment will go here
+</div>
+
+</body>
+</html>


[syncope] 07/07: [SYNCOPE-1545] add AUP support; off by default

Posted by il...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

ilgrosso pushed a commit to branch SYNCOPE-1545
in repository https://gitbox.apache.org/repos/asf/syncope.git

commit eba192890075801e989f88508c3846a376708e78
Author: Misagh Moayyed <mm...@gmail.com>
AuthorDate: Fri Mar 13 15:53:56 2020 +0330

    [SYNCOPE-1545] add AUP support; off by default
---
 .travis.yml                                                   |  9 +++++----
 pom.xml                                                       | 11 +++++++----
 wa/pom.xml                                                    |  9 ++++++---
 .../org/apache/syncope/wa/config/SyncopeWAConfiguration.java  | 11 ++++++-----
 wa/src/main/resources/wa.properties                           |  6 +++++-
 5 files changed, 29 insertions(+), 17 deletions(-)

diff --git a/.travis.yml b/.travis.yml
index 0ed30c8..a1fa1b3 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -28,9 +28,6 @@ git:
 env:
   global:
   - MAVEN_OPTS="-Xmx4096M -Xss128M -XX:+CMSClassUnloadingEnabled -XX:+TieredCompilation -XX:TieredStopAtLevel=1 -noverify"
-  - JAVAEE_CONTAINER=Tomcat
-  - DBMS=H2
-  - jaxrsContentType=application/json
 install: true
 notifications:
   email:
@@ -52,10 +49,14 @@ jobs:
       ######################################################
     - stage: test
       name: "Unit Tests"
-      script: mvn -T 1C clean test -Dinvoker.streamLogs=true -Dmodernizer.skip=true -Dianal.skip=true -Drat.skip=true -Dcheckstyle.skip=true -Dsass.skip=true
+      script: mvn -T 1C clean test -Dinvoker.streamLogs=true -Dmodernizer.skip=true -Dianal.skip=true -Drat.skip=true -Dcheckstyle.skip=true -Dskip.sass=true
       ######################################################
     - stage: fit
       name: "Full Integration Tests: Apache Tomcat / H2 / JSON Content-Type"
+      env:
+       - JAVAEE_CONTAINER=Tomcat
+       - DBMS=H2
+       - jaxrsContentType=application/json
       script: travis_wait 55 mvn -f fit/core-reference/pom.xml verify -Dinvoker.streamLogs=true -Dmodernizer.skip=true -Dianal.skip=true -Drat.skip=true -Dcheckstyle.skip=true -Djacoco.skip=true
       after_failure:
        - cat fit/core-reference/target/log/*
diff --git a/pom.xml b/pom.xml
index d13c03e..bfc1ce0 100644
--- a/pom.xml
+++ b/pom.xml
@@ -422,6 +422,7 @@ under the License.
     <quartz.version>2.3.2</quartz.version>
 
     <cocoon.version>3.0.0-alpha-3</cocoon.version>
+    <batik.version>1.12</batik.version>
 
     <groovy.version>3.0.1</groovy.version>
 
@@ -444,8 +445,6 @@ under the License.
     <commons-lang.version>3.9</commons-lang.version>
     <commons-text.version>1.8</commons-text.version>
     <commons-logging.version>1.1.3</commons-logging.version>
-    <batik.version>1.10</batik.version>
-    <tika.version>1.23</tika.version>
 
     <joda.version>2.10.5</joda.version>
 
@@ -1200,7 +1199,7 @@ under the License.
       <dependency>
         <groupId>org.apache.tika</groupId>
         <artifactId>tika-core</artifactId>
-        <version>${tika.version}</version>
+        <version>1.23</version>
       </dependency>
 
       <dependency>
@@ -1371,7 +1370,7 @@ under the License.
       <dependency>
         <groupId>org.apache.xmlgraphics</groupId>
         <artifactId>fop</artifactId>
-        <version>2.3</version>
+        <version>2.4</version>
         <exclusions>
           <exclusion>
             <groupId>xalan</groupId>
@@ -1393,6 +1392,10 @@ under the License.
             <groupId>org.apache.xmlgraphics</groupId>
             <artifactId>batik-extension</artifactId>
           </exclusion>
+          <exclusion>
+            <groupId>javax.servlet</groupId>
+            <artifactId>servlet-api</artifactId>
+          </exclusion>
         </exclusions>
       </dependency>
       <dependency>
diff --git a/wa/pom.xml b/wa/pom.xml
index 85cff67..fe7a713 100644
--- a/wa/pom.xml
+++ b/wa/pom.xml
@@ -132,9 +132,8 @@ under the License.
       <artifactId>cas-server-support-reports</artifactId>
     </dependency>
     <dependency>
-        <groupId>org.apereo.cas</groupId>
-        <artifactId>cas-server-support-syncope-authentication</artifactId>
-        <scope>compile</scope>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-support-syncope-authentication</artifactId>
     </dependency>
     <dependency>
       <groupId>org.apereo.cas</groupId>
@@ -170,6 +169,10 @@ under the License.
     </dependency>
     <dependency>
       <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-support-aup-webflow</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
       <artifactId>cas-server-support-rest-service-registry</artifactId>
     </dependency>
     <dependency>
diff --git a/wa/src/main/java/org/apache/syncope/wa/config/SyncopeWAConfiguration.java b/wa/src/main/java/org/apache/syncope/wa/config/SyncopeWAConfiguration.java
index 2107f51..701cb53 100644
--- a/wa/src/main/java/org/apache/syncope/wa/config/SyncopeWAConfiguration.java
+++ b/wa/src/main/java/org/apache/syncope/wa/config/SyncopeWAConfiguration.java
@@ -6,7 +6,8 @@
  * to you under the Apache License, Version 2.0 (the
  * "License"); you may not use this file except in compliance
  * with the License.  You may obtain a copy of the License at
- *    http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
  *
  * Unless required by applicable law or agreed to in writing,
  * software distributed under the License is distributed on an
@@ -14,26 +15,26 @@
  * KIND, either express or implied.  See the License for the
  * specific language governing permissions and limitations
  * under the License.
- *
  */
-
 package org.apache.syncope.wa.config;
 
+import java.io.Serializable;
 import org.apereo.cas.services.DefaultRegisteredServiceEntityMapper;
 import org.apereo.cas.services.RegisteredServiceEntityMapper;
-
 import org.apache.syncope.common.keymaster.client.api.model.NetworkService;
 import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStart;
 import org.apache.syncope.common.keymaster.client.api.startstop.KeymasterStop;
+import org.apereo.cas.services.RegisteredService;
 import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 
 @Configuration(proxyBeanMethods = false)
 public class SyncopeWAConfiguration {
+
     @Bean
     @ConditionalOnProperty(name = "cas.serviceRegistry.rest.url")
-    public RegisteredServiceEntityMapper registeredServiceEntityMapper() {
+    public RegisteredServiceEntityMapper<RegisteredService, Serializable> registeredServiceEntityMapper() {
         return new DefaultRegisteredServiceEntityMapper();
     }
 
diff --git a/wa/src/main/resources/wa.properties b/wa/src/main/resources/wa.properties
index 14e07af..9a0d56e 100644
--- a/wa/src/main/resources/wa.properties
+++ b/wa/src/main/resources/wa.properties
@@ -26,4 +26,8 @@ cas.authn.oidc.jwksFile=file:${conf.directory}/oidc.keystore
 
 # Disable access to the login endpoint
 # if no target application is specified.
-cas.sso.allow-missing-service-parameter=false
+cas.sso.allow-missing-service-parameter=true
+
+# Disable the acceptable usage policy
+# by default for now.
+cas.acceptableUsagePolicy.enabled=false


[syncope] 01/07: [SYNCOPE-1545] Initial

Posted by il...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

ilgrosso pushed a commit to branch SYNCOPE-1545
in repository https://gitbox.apache.org/repos/asf/syncope.git

commit 596f679433abe814f6e83e55a4b1fc7cfa70d7b6
Author: Francesco Chicchiriccò <il...@apache.org>
AuthorDate: Tue Mar 3 08:56:41 2020 +0100

    [SYNCOPE-1545] Initial
---
 .travis.yml                                        |   2 +-
 client/am/console/pom.xml                          |   2 +-
 client/idm/console/pom.xml                         |   2 +-
 client/idrepo/common-ui/pom.xml                    |   2 +-
 client/idrepo/console/pom.xml                      |   2 +-
 client/idrepo/enduser/pom.xml                      |   2 +-
 pom.xml                                            | 267 +++++++++++++++++--
 wa/LICENSE                                         | 202 +++++++++++++++
 wa/NOTICE                                          |   5 +
 wa/pom.xml                                         | 286 +++++++++++++++++++++
 .../apache/syncope/wa/SyncopeWAApplication.java    |  87 +++++++
 wa/src/main/resources/application.properties       |  40 +++
 wa/src/test/resources/application-debug.properties |  17 ++
 13 files changed, 886 insertions(+), 30 deletions(-)

diff --git a/.travis.yml b/.travis.yml
index a1fa1b3..e2597fb 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -49,7 +49,7 @@ jobs:
       ######################################################
     - stage: test
       name: "Unit Tests"
-      script: mvn -T 1C clean test -Dinvoker.streamLogs=true -Dmodernizer.skip=true -Dianal.skip=true -Drat.skip=true -Dcheckstyle.skip=true -Dskip.sass=true
+      script: mvn -T 1C clean test -Dinvoker.streamLogs=true -Dmodernizer.skip=true -Dianal.skip=true -Drat.skip=true -Dcheckstyle.skip=true -Dsass.skip=true
       ######################################################
     - stage: fit
       name: "Full Integration Tests: Apache Tomcat / H2 / JSON Content-Type"
diff --git a/client/am/console/pom.xml b/client/am/console/pom.xml
index bfddc84..f79ac21 100644
--- a/client/am/console/pom.xml
+++ b/client/am/console/pom.xml
@@ -85,7 +85,7 @@ under the License.
               <destination>${project.build.outputDirectory}/META-INF/resources/css</destination>
             </resource>
           </resources>
-          <skip>${skip.sass}</skip>
+          <skip>${sass.skip}</skip>
         </configuration>
       </plugin>
     </plugins>
diff --git a/client/idm/console/pom.xml b/client/idm/console/pom.xml
index adb6a4d..028d8c7 100644
--- a/client/idm/console/pom.xml
+++ b/client/idm/console/pom.xml
@@ -85,7 +85,7 @@ under the License.
               <destination>${project.build.outputDirectory}/META-INF/resources/css</destination>
             </resource>
           </resources>
-          <skip>${skip.sass}</skip>
+          <skip>${sass.skip}</skip>
         </configuration>
       </plugin>
     </plugins>
diff --git a/client/idrepo/common-ui/pom.xml b/client/idrepo/common-ui/pom.xml
index 3c49f74..d8be621 100644
--- a/client/idrepo/common-ui/pom.xml
+++ b/client/idrepo/common-ui/pom.xml
@@ -134,7 +134,7 @@ under the License.
               <destination>${project.build.outputDirectory}/META-INF/resources/ui-commons/css/accessibility</destination>
             </resource>
           </resources>
-          <skip>${skip.sass}</skip>
+          <skip>${sass.skip}</skip>
         </configuration>
       </plugin>
     </plugins>
diff --git a/client/idrepo/console/pom.xml b/client/idrepo/console/pom.xml
index 86e69aa..e8447fd 100644
--- a/client/idrepo/console/pom.xml
+++ b/client/idrepo/console/pom.xml
@@ -177,7 +177,7 @@ under the License.
               <destination>${project.build.outputDirectory}/META-INF/resources/css</destination>
             </resource>
           </resources>
-          <skip>${skip.sass}</skip>
+          <skip>${sass.skip}</skip>
         </configuration>
       </plugin>
     </plugins>
diff --git a/client/idrepo/enduser/pom.xml b/client/idrepo/enduser/pom.xml
index 4291275..c80e81e 100644
--- a/client/idrepo/enduser/pom.xml
+++ b/client/idrepo/enduser/pom.xml
@@ -150,7 +150,7 @@ under the License.
               <destination>${project.build.outputDirectory}/org/apache/syncope/client/enduser/assets/css</destination>
             </resource>
           </resources>
-          <skip>${skip.sass}</skip>
+          <skip>${sass.skip}</skip>
         </configuration>
       </plugin>
     </plugins>
diff --git a/pom.xml b/pom.xml
index 4b8a601..2f12460 100644
--- a/pom.xml
+++ b/pom.xml
@@ -449,16 +449,13 @@ under the License.
 
     <joda.version>2.10.5</joda.version>
 
+    <cas.version>6.2.0-SNAPSHOT</cas.version>
+
     <h2.version>1.4.200</h2.version>
 
     <junit.version>5.6.0</junit.version>
     <mockito.version>3.3.3</mockito.version>
 
-    <conf.directory>${project.build.directory}/test-classes</conf.directory>
-    <bundles.directory>${project.build.directory}/bundles</bundles.directory>
-    <connid.location>file:${bundles.directory}/</connid.location>
-    <log.directory>${project.build.directory}/log</log.directory>
-
     <swagger-core.version>2.1.1</swagger-core.version>    
     <swagger-ui.version>3.25.0</swagger-ui.version>
     <guava.version>20.0</guava.version>
@@ -488,7 +485,7 @@ under the License.
     
     <ianal-maven-plugin-version>1.0-alpha-1</ianal-maven-plugin-version>
 
-    <netbeans.version>RELEASE111</netbeans.version>
+    <netbeans.version>RELEASE112</netbeans.version>
 
     <antlr4.version>4.8-1</antlr4.version>
 
@@ -532,6 +529,11 @@ under the License.
     <jdbc.mssql.version>8.2.0.jre</jdbc.mssql.version>
     <jdbc.oracle.version>19.3.0.0</jdbc.oracle.version>
 
+    <conf.directory>${project.build.directory}/test-classes</conf.directory>
+    <bundles.directory>${project.build.directory}/bundles</bundles.directory>
+    <connid.location>file:${bundles.directory}/</connid.location>
+    <log.directory>${project.build.directory}/log</log.directory>
+
     <adminUser>admin</adminUser>
     <anonymousUser>anonymous</anonymousUser>
     <adminPassword>DE088591C00CC98B36F5ADAAF7DA2B004CF7F2FE7BBB45B766B6409876E2F3DB13C7905C6AA59464</adminPassword>
@@ -547,7 +549,8 @@ under the License.
     <argLine>-Xms512m -Xmx1024m -Xss256k</argLine>
 
     <ianal.skip>false</ianal.skip>
-    <skip.sass>false</skip.sass>
+    <sass.skip>false</sass.skip>
+    <remote-resources.skip>true</remote-resources.skip>
 
     <sonar.language>java</sonar.language>
     <sonar.java.source>${targetJdk}</sonar.java.source>
@@ -1246,6 +1249,16 @@ under the License.
         <artifactId>groovy-sql</artifactId>
         <version>${groovy.version}</version>
       </dependency>
+      <dependency>
+        <groupId>org.codehaus.groovy</groupId>
+        <artifactId>groovy-json</artifactId>
+        <version>${groovy.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.codehaus.groovy</groupId>
+        <artifactId>groovy-groovysh</artifactId>
+        <version>${groovy.version}</version>
+      </dependency>
     
       <dependency>
         <groupId>com.h2database</groupId>
@@ -1418,6 +1431,181 @@ under the License.
       </dependency>
       <!-- /Flowable -->
 
+      <!-- CAS -->
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-api-configuration-model</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-audit</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-validation-api</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-authentication</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-configuration</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-configuration-metadata-repository</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-cookie</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-logout</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-logging</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-services</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-services-api</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-tickets</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-util</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-validation</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-web</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-webflow</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-core-events-configuration</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-thymeleaf</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-actions</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-ldap</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-jdbc</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-reports</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-saml</artifactId>
+        <version>${cas.version}</version>
+        <exclusions>
+          <exclusion>
+            <groupId>org.opensaml</groupId>
+            <artifactId>opensaml-storage-impl</artifactId>
+          </exclusion>
+        </exclusions>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-person-directory</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-themes</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-oidc</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-validation</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-pm-webflow</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-pac4j-webflow</artifactId>
+        <version>${cas.version}</version>
+        <exclusions>
+          <exclusion>
+            <groupId>org.opensaml</groupId>
+            <artifactId>opensaml-storage-impl</artifactId>
+          </exclusion>
+        </exclusions>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-consent-webflow</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-webapp-config</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <!-- /CAS -->
+
       <!-- Wicket -->
       <dependency>
         <groupId>org.apache.wicket</groupId>
@@ -1513,10 +1701,30 @@ under the License.
       </dependency>
       <dependency>
         <groupId>org.apache.logging.log4j</groupId>
+        <artifactId>log4j-jul</artifactId>
+        <version>${log4j.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.logging.log4j</groupId>
+        <artifactId>log4j-jcl</artifactId>
+        <version>${log4j.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.logging.log4j</groupId>
+        <artifactId>log4j-web</artifactId>
+        <version>${log4j.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.logging.log4j</groupId>
         <artifactId>log4j-slf4j-impl</artifactId>
         <version>${log4j.version}</version>
       </dependency>
       <dependency>
+        <groupId>org.apache.logging.log4j</groupId>
+        <artifactId>log4j-slf4j18-impl</artifactId>
+        <version>${log4j.version}</version>
+      </dependency>
+      <dependency>
         <groupId>com.lmax</groupId>
         <artifactId>disruptor</artifactId>
         <version>${disruptor.version}</version>
@@ -1532,7 +1740,12 @@ under the License.
         <artifactId>jcl-over-slf4j</artifactId>
         <version>${slf4j.version}</version>
       </dependency>
-      
+      <dependency>
+        <groupId>org.slf4j</groupId>
+        <artifactId>jul-to-slf4j</artifactId>
+        <version>${slf4j.version}</version>
+      </dependency>
+
       <dependency>
         <groupId>org.apache.pdfbox</groupId>
         <artifactId>pdfbox</artifactId>
@@ -1827,8 +2040,14 @@ under the License.
       </snapshots>
     </repository>
     <repository>
-      <id>jitpack.io</id>
-      <url>https://jitpack.io</url>
+      <id>shibboleth-releases</id>
+      <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
+      <releases>
+        <enabled>true</enabled>
+      </releases>
+      <snapshots>
+        <enabled>false</enabled>
+      </snapshots>
     </repository>
   </repositories>
 
@@ -2258,11 +2477,11 @@ under the License.
                 <script><![CDATA[
                 import java.util.Date
                 import java.text.MessageFormat
-                def year = MessageFormat.format("{0,date,yyyy}", new Date()) 
+                def year = MessageFormat.format("{0,date,yyyy}", new Date())
                 project.properties['year'] = year
                 project.properties['snapshotOrRelease'] = project.version.endsWith("SNAPSHOT") ? "snapshot" : "release"
                 project.properties['licenseUrl'] = project.parent.licenses[0].url
-                project.properties['site.deploymentBaseDir'] = 
+                project.properties['site.deploymentBaseDir'] =
                 project.properties['site.deploymentBaseUrl'] == null || !project.properties['site.deploymentBaseUrl'].startsWith('file:') ? project.properties['project.build.directory'] + "/generated-docs" : project.properties['site.deploymentBaseUrl'].substring(7)
 
                 if (!project.properties.containsKey('buildNumber'))
@@ -2316,19 +2535,14 @@ under the License.
         </executions>
       </plugin>
       
-      <!-- Drop inherited behavior (i.e. don't put any more default LICENSE and NOTICE files in all artifacts) -->
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-remote-resources-plugin</artifactId>
-        <executions>
-          <execution>
-            <goals>
-              <goal>process</goal>
-            </goals>
-            <phase>none</phase>
-          </execution>
-        </executions>
+        <configuration>
+          <skip>${remote-resources.skip}</skip>
+        </configuration>
       </plugin>
+
       <!-- Put NOTICE and LICENSE files in all artifacts and javadocs -->
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
@@ -2488,6 +2702,10 @@ under the License.
     <profile>
       <id>apache-release</id>
 
+      <properties>
+        <remote-resources.skip>false</remote-resources.skip>
+      </properties>
+
       <build>
         <plugins>
           <plugin>
@@ -2633,7 +2851,7 @@ under the License.
               <generateProjectInfo>false</generateProjectInfo>
             </configuration>
           </plugin>
-          
+
           <plugin>
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-antrun-plugin</artifactId>
@@ -2674,7 +2892,7 @@ under the License.
 
       <build>
         <defaultGoal>clean install</defaultGoal>
-        
+
         <plugins>
           <plugin>
             <groupId>org.apache.maven.plugins</groupId>
@@ -2698,12 +2916,13 @@ under the License.
       </modules>
     </profile>
   </profiles>
-  
+
   <modules>
     <module>common</module>
     <module>core</module>
     <module>client</module>
     <module>sra</module>
+    <module>wa</module>
     <module>fit</module>
     <module>ext</module>
     <module>archetype</module>
diff --git a/wa/LICENSE b/wa/LICENSE
new file mode 100644
index 0000000..d645695
--- /dev/null
+++ b/wa/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/wa/NOTICE b/wa/NOTICE
new file mode 100644
index 0000000..3db7985
--- /dev/null
+++ b/wa/NOTICE
@@ -0,0 +1,5 @@
+Apache Syncope
+Copyright 2012-2019 The Apache Software Foundation
+
+This product includes software developed by:
+The Apache Software Foundation (http://www.apache.org/).
diff --git a/wa/pom.xml b/wa/pom.xml
new file mode 100644
index 0000000..3850226
--- /dev/null
+++ b/wa/pom.xml
@@ -0,0 +1,286 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements.  See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership.  The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License.  You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied.  See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+
+  <modelVersion>4.0.0</modelVersion>
+
+  <parent>
+    <groupId>org.apache.syncope</groupId>
+    <artifactId>syncope</artifactId>
+    <version>3.0.0-SNAPSHOT</version>
+  </parent>
+
+  <name>Apache Syncope WA</name>
+  <description>Apache Syncope WA</description>
+  <artifactId>syncope-wa</artifactId>
+  <packaging>jar</packaging>
+  
+  <properties>
+    <guava.version>28.2-jre</guava.version>
+    <opensaml.version>3.4.5</opensaml.version>
+    <bootstrap.version>4.4.1</bootstrap.version>
+    <slf4j.version>2.0.0-alpha1</slf4j.version>
+
+    <rootpom.basedir>${basedir}/..</rootpom.basedir>
+  </properties>
+
+  <dependencies>
+    <dependency>
+      <groupId>org.glassfish</groupId>
+      <artifactId>javax.el</artifactId>
+    </dependency>
+    
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-core</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-core-audit</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-core-authentication</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-core-configuration</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-core-cookie</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-core-logout</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-core-logging</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-core-services</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-core-tickets</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-core-util</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-core-validation</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-core-web</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-core-webflow</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-core-events-configuration</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-support-thymeleaf</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-support-actions</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-support-ldap</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-support-reports</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-support-saml</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-support-person-directory</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-support-themes</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-support-oidc</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-support-validation</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-support-pm-webflow</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-support-pac4j-webflow</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-support-consent-webflow</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.apereo.cas</groupId>
+      <artifactId>cas-server-webapp-config</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.springframework.boot</groupId>
+      <artifactId>spring-boot-starter-web</artifactId>
+      <exclusions>
+        <exclusion>
+          <groupId>org.springframework.boot</groupId>
+          <artifactId>spring-boot-starter-logging</artifactId>
+        </exclusion>
+      </exclusions>    
+    </dependency>
+    <dependency>
+      <groupId>org.springframework.boot</groupId>
+      <artifactId>spring-boot-starter-actuator</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>org.springframework.boot</groupId>
+      <artifactId>spring-boot-starter-security</artifactId>
+    </dependency>
+
+    <dependency>
+      <groupId>org.springframework.boot</groupId>
+      <artifactId>spring-boot-starter-test</artifactId>
+      <scope>test</scope>
+      <exclusions>
+        <exclusion>
+          <groupId>org.junit.vintage</groupId>
+          <artifactId>junit-vintage-engine</artifactId>
+        </exclusion>
+      </exclusions>
+    </dependency>
+  </dependencies>
+
+  <build>
+    <plugins>
+      <plugin>
+        <groupId>org.apache.maven.plugins</groupId>
+        <artifactId>maven-checkstyle-plugin</artifactId>
+      </plugin>
+    </plugins>
+
+    <resources>
+      <resource>
+        <directory>src/main/resources</directory>
+        <filtering>true</filtering>
+      </resource>
+
+      <resource>
+        <directory>${basedir}/../src/main/resources</directory>
+        <filtering>true</filtering>
+        <includes>
+          <include>banner.txt</include>
+        </includes>
+      </resource>
+    </resources>
+  </build>
+
+  <profiles>
+    <profile>
+      <id>debug</id>
+
+      <build>
+        <defaultGoal>clean package spring-boot:run</defaultGoal>
+
+        <plugins>
+          <plugin>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-maven-plugin</artifactId>
+            <configuration>
+              <mainClass>org.apache.syncope.wa.SyncopeWAApplication</mainClass>
+              <jvmArguments>
+                -Xdebug -Xrunjdwp:transport=dt_socket,address=8000,server=y,suspend=n
+              </jvmArguments>
+              <profiles>
+                <profile>debug</profile>
+              </profiles>
+            </configuration>
+          </plugin>
+        </plugins>
+
+        <resources>
+          <resource>
+            <directory>${basedir}/src/test/resources</directory>
+            <includes>
+              <include>application-debug.properties</include>
+            </includes>
+          </resource>
+        </resources>
+      </build>
+    </profile>
+
+    <profile>
+      <id>site</id>
+
+      <build>
+        <plugins>
+          <plugin>
+            <groupId>org.asciidoctor</groupId>
+            <artifactId>asciidoctor-maven-plugin</artifactId>
+            <inherited>false</inherited>
+            <configuration>
+              <skip>true</skip>
+            </configuration>
+          </plugin>
+          <plugin>
+            <groupId>org.apache.maven.plugins</groupId>
+            <artifactId>maven-site-plugin</artifactId>
+            <inherited>true</inherited>
+            <configuration>
+              <skip>true</skip>
+              <skipDeploy>true</skipDeploy>
+              <generateReports>false</generateReports>
+            </configuration>
+          </plugin>
+          <plugin>
+            <groupId>org.apache.maven.plugins</groupId>
+            <artifactId>maven-antrun-plugin</artifactId>
+            <executions>
+              <execution>
+                <id>copy-docs-to-site</id>
+                <phase>none</phase>
+              </execution>
+            </executions>
+          </plugin>
+        </plugins>
+      </build>
+    </profile>
+  </profiles>
+
+</project>
diff --git a/wa/src/main/java/org/apache/syncope/wa/SyncopeWAApplication.java b/wa/src/main/java/org/apache/syncope/wa/SyncopeWAApplication.java
new file mode 100644
index 0000000..970d890
--- /dev/null
+++ b/wa/src/main/java/org/apache/syncope/wa/SyncopeWAApplication.java
@@ -0,0 +1,87 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.syncope.wa;
+
+import org.apache.commons.lang.StringUtils;
+import org.apereo.cas.configuration.CasConfigurationProperties;
+import org.apereo.cas.util.AsciiArtUtils;
+import org.apereo.cas.util.DateTimeUtils;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.boot.autoconfigure.cassandra.CassandraAutoConfiguration;
+import org.springframework.boot.autoconfigure.data.mongo.MongoDataAutoConfiguration;
+import org.springframework.boot.autoconfigure.data.redis.RedisAutoConfiguration;
+import org.springframework.boot.autoconfigure.data.redis.RedisRepositoriesAutoConfiguration;
+import org.springframework.boot.autoconfigure.groovy.template.GroovyTemplateAutoConfiguration;
+import org.springframework.boot.autoconfigure.gson.GsonAutoConfiguration;
+import org.springframework.boot.autoconfigure.jdbc.DataSourceAutoConfiguration;
+import org.springframework.boot.autoconfigure.jdbc.DataSourceTransactionManagerAutoConfiguration;
+import org.springframework.boot.autoconfigure.jersey.JerseyAutoConfiguration;
+import org.springframework.boot.autoconfigure.jmx.JmxAutoConfiguration;
+import org.springframework.boot.autoconfigure.mongo.MongoAutoConfiguration;
+import org.springframework.boot.autoconfigure.orm.jpa.HibernateJpaAutoConfiguration;
+import org.springframework.boot.builder.SpringApplicationBuilder;
+import org.springframework.boot.context.event.ApplicationReadyEvent;
+import org.springframework.boot.context.properties.EnableConfigurationProperties;
+import org.springframework.boot.web.servlet.support.SpringBootServletInitializer;
+import org.springframework.context.annotation.EnableAspectJAutoProxy;
+import org.springframework.context.event.EventListener;
+import org.springframework.scheduling.annotation.EnableAsync;
+import org.springframework.scheduling.annotation.EnableScheduling;
+import org.springframework.transaction.annotation.EnableTransactionManagement;
+
+@SpringBootApplication(exclude = {
+    HibernateJpaAutoConfiguration.class,
+    JerseyAutoConfiguration.class,
+    GroovyTemplateAutoConfiguration.class,
+    GsonAutoConfiguration.class,
+    JmxAutoConfiguration.class,
+    DataSourceAutoConfiguration.class,
+    RedisAutoConfiguration.class,
+    MongoAutoConfiguration.class,
+    MongoDataAutoConfiguration.class,
+    CassandraAutoConfiguration.class,
+    DataSourceTransactionManagerAutoConfiguration.class,
+    RedisRepositoriesAutoConfiguration.class
+})
+@EnableConfigurationProperties(CasConfigurationProperties.class)
+@EnableAsync
+@EnableAspectJAutoProxy(proxyTargetClass = true)
+@EnableTransactionManagement(proxyTargetClass = true)
+@EnableScheduling
+public class SyncopeWAApplication extends SpringBootServletInitializer {
+
+    private static final Logger LOG = LoggerFactory.getLogger(SyncopeWAApplication.class);
+
+    public static void main(final String[] args) {
+        new SpringApplicationBuilder(SyncopeWAApplication.class).run(args);
+    }
+
+    /**
+     * Handle application ready event.
+     *
+     * @param event the event
+     */
+    @EventListener
+    public void handleApplicationReadyEvent(final ApplicationReadyEvent event) {
+        AsciiArtUtils.printAsciiArtReady(LOG, StringUtils.EMPTY);
+        LOG.info("Ready to process requests @ [{}]", DateTimeUtils.zonedDateTimeOf(event.getTimestamp()));
+    }
+}
diff --git a/wa/src/main/resources/application.properties b/wa/src/main/resources/application.properties
new file mode 100644
index 0000000..487d11b
--- /dev/null
+++ b/wa/src/main/resources/application.properties
@@ -0,0 +1,40 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+spring.application.name=Apache Syncope ${syncope.version} WA
+spring.groovy.template.check-template-location=false
+spring.main.banner-mode=log
+
+server.port=8080
+
+spring.http.encoding.charset=UTF-8
+spring.http.encoding.enabled=true
+spring.http.encoding.force=true
+
+server.servlet.contextPath=/syncope-wa
+
+##
+# Allow configuration classes to override bean definitions from Spring Boot
+#
+spring.main.allow-bean-definition-overriding=true
+spring.main.lazy-initialization=false
+
+service.discovery.address=http://localhost:8080/syncope-wa/
+
+# Conf directories
+conf.directory=${conf.directory}
+cas.standalone.configurationDirectory=${conf.directory}
+cas.authn.oidc.jwksFile=file:${conf.directory}/oidc.keystore
diff --git a/wa/src/test/resources/application-debug.properties b/wa/src/test/resources/application-debug.properties
new file mode 100644
index 0000000..5f956d3
--- /dev/null
+++ b/wa/src/test/resources/application-debug.properties
@@ -0,0 +1,17 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+cas.authn.accept.users=admin::password


[syncope] 02/07: [SYNCOPE-1545] Basic white-labeling

Posted by il...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

ilgrosso pushed a commit to branch SYNCOPE-1545
in repository https://gitbox.apache.org/repos/asf/syncope.git

commit abfd62a6210bac17e819d5d01e51a8e303dc313a
Author: Francesco Chicchiriccò <il...@apache.org>
AuthorDate: Tue Mar 3 15:32:33 2020 +0100

    [SYNCOPE-1545] Basic white-labeling
---
 .../syncope/client/console/pages/BasePage.html     |   6 +-
 pom.xml                                            | 212 +++++++++++---------
 wa/pom.xml                                         |  13 ++
 wa/src/main/resources/static/images/logo.png       | Bin 0 -> 8913 bytes
 .../main/resources/templates/fragments/footer.html |  30 +++
 .../main/resources/templates/fragments/header.html | 217 +++++++++++++++++++++
 6 files changed, 380 insertions(+), 98 deletions(-)

diff --git a/client/idrepo/console/src/main/resources/org/apache/syncope/client/console/pages/BasePage.html b/client/idrepo/console/src/main/resources/org/apache/syncope/client/console/pages/BasePage.html
index e18f828..7bf0e0a 100644
--- a/client/idrepo/console/src/main/resources/org/apache/syncope/client/console/pages/BasePage.html
+++ b/client/idrepo/console/src/main/resources/org/apache/syncope/client/console/pages/BasePage.html
@@ -159,7 +159,7 @@ under the License.
       </div>
 
       <footer class="main-footer">
-        <strong>Copyright &copy; 2010&#45;<span id="spanYear"></span> 
+        <strong>Copyright &copy; 2010&#45;${year}
           <a href="http://www.apache.org/" target="_blank" rel="noopener noreferrer">The Apache Software Foundation</a>.</strong>
         All rights reserved.
       </footer>
@@ -271,9 +271,5 @@ under the License.
     </div>
 
     <div id="veil">Loading...</div>
-
-    <script type="text/javascript">
-      $('#spanYear').html(new Date().getFullYear());
-    </script>
   </body>
 </html>
diff --git a/pom.xml b/pom.xml
index 2f12460..d13c03e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -153,7 +153,7 @@ under the License.
         <role>PMC member</role>
       </roles>
       <url>http://people.apache.org/~massi/</url>
-    </developer>    
+    </developer>
     <developer>
       <id>rene</id>
       <name>René Mulder</name>
@@ -409,9 +409,9 @@ under the License.
     <jackson.version>2.10.3</jackson.version>
 
     <spring.version>5.2.4.RELEASE</spring.version>
-    <spring-security.version>5.3.0.RELEASE</spring-security.version>
+    <spring-security.version>5.2.2.RELEASE</spring-security.version>
     <spring-boot.version>2.2.5.RELEASE</spring-boot.version>
-    <spring-cloud-gateway.version>2.2.2.RELEASE</spring-cloud-gateway.version>
+    <spring-cloud-gateway.version>2.2.1.RELEASE</spring-cloud-gateway.version>
 
     <openjpa.version>3.1.1</openjpa.version>
     <hikaricp.version>3.4.2</hikaricp.version>
@@ -423,7 +423,7 @@ under the License.
 
     <cocoon.version>3.0.0-alpha-3</cocoon.version>
 
-    <groovy.version>3.0.2</groovy.version>
+    <groovy.version>3.0.1</groovy.version>
 
     <flowable.version>6.5.0</flowable.version>
 
@@ -432,7 +432,7 @@ under the License.
     <slf4j.version>1.7.30</slf4j.version>
     <opensaml.version>3.3.1</opensaml.version>
 
-    <elasticsearch.version>7.6.1</elasticsearch.version>
+    <elasticsearch.version>7.6.0</elasticsearch.version>
 
     <apacheds.version>2.0.0.AM25</apacheds.version>
     <apachedirapi.version>2.0.0.AM2</apachedirapi.version>
@@ -444,7 +444,7 @@ under the License.
     <commons-lang.version>3.9</commons-lang.version>
     <commons-text.version>1.8</commons-text.version>
     <commons-logging.version>1.1.3</commons-logging.version>
-    
+    <batik.version>1.10</batik.version>
     <tika.version>1.23</tika.version>
 
     <joda.version>2.10.5</joda.version>
@@ -454,9 +454,9 @@ under the License.
     <h2.version>1.4.200</h2.version>
 
     <junit.version>5.6.0</junit.version>
-    <mockito.version>3.3.3</mockito.version>
+    <mockito.version>3.3.0</mockito.version>
 
-    <swagger-core.version>2.1.1</swagger-core.version>    
+    <swagger-core.version>2.1.1</swagger-core.version>
     <swagger-ui.version>3.25.0</swagger-ui.version>
     <guava.version>20.0</guava.version>
 
@@ -464,7 +464,7 @@ under the License.
     <jquery-ui.version>1.12.1</jquery-ui.version>
     <jquery-slimscroll.version>1.3.8</jquery-slimscroll.version>
     <jquery-cookie.version>1.4.1-1</jquery-cookie.version>
-    
+
     <bootstrap.version>3.4.1</bootstrap.version>
     <bootstrap-select.version>1.12.4</bootstrap-select.version>
     <bootstrap-fileinput.version>4.4.8</bootstrap-fileinput.version>
@@ -477,12 +477,12 @@ under the License.
     <googlediffmatchpath.version>895a9512bb</googlediffmatchpath.version>
     <jsplumb.version>2.0.7</jsplumb.version>
     <chartjs.version>1.0.2</chartjs.version>
-    
+
     <wicket.version>8.7.0</wicket.version>
     <wicket-jqueryui.version>8.6.0</wicket-jqueryui.version>
     <wicket-bootstrap.version>2.0.12</wicket-bootstrap.version>
     <wicket-spring-boot.version>2.1.9</wicket-spring-boot.version>
-    
+
     <ianal-maven-plugin-version>1.0-alpha-1</ianal-maven-plugin-version>
 
     <netbeans.version>RELEASE112</netbeans.version>
@@ -592,9 +592,9 @@ under the License.
         <artifactId>geronimo-javamail_1.4_mail</artifactId>
         <version>1.8.4</version>
       </dependency>
-      <dependency> 
-        <groupId>javax.servlet</groupId> 
-        <artifactId>javax.servlet-api</artifactId> 
+      <dependency>
+        <groupId>javax.servlet</groupId>
+        <artifactId>javax.servlet-api</artifactId>
         <version>4.0.1</version>
         <scope>provided</scope>
       </dependency>
@@ -609,7 +609,7 @@ under the License.
         <artifactId>taglibs-standard-impl</artifactId>
         <version>1.2.5</version>
       </dependency>
-      
+
       <!-- CXF -->
       <dependency>
         <groupId>org.apache.cxf</groupId>
@@ -673,7 +673,7 @@ under the License.
       </dependency>
       <!-- /CXF -->
 
-      <!-- Swagger -->      
+      <!-- Swagger -->
       <dependency>
         <groupId>io.swagger.core.v3</groupId>
         <artifactId>swagger-annotations</artifactId>
@@ -684,7 +684,7 @@ under the License.
             <artifactId>jackson-dataformat-yaml</artifactId>
           </exclusion>
         </exclusions>
-      </dependency>      
+      </dependency>
       <dependency>
         <groupId>io.swagger.core.v3</groupId>
         <artifactId>swagger-jaxrs2</artifactId>
@@ -695,13 +695,13 @@ under the License.
         <artifactId>swagger-ui</artifactId>
         <version>${swagger-ui.version}</version>
       </dependency>
-      
+
       <dependency>
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
         <version>${guava.version}</version>
       </dependency>
-      <!-- /Swagger -->      
+      <!-- /Swagger -->
 
       <!-- Camel -->
       <dependency>
@@ -919,7 +919,7 @@ under the License.
         <artifactId>javax.el</artifactId>
         <version>3.0.1-b09</version>
       </dependency>
-            
+
       <dependency>
         <groupId>com.fasterxml.jackson.core</groupId>
         <artifactId>jackson-core</artifactId>
@@ -990,7 +990,7 @@ under the License.
             <artifactId>joda-time</artifactId>
           </exclusion>
         </exclusions>
-      </dependency>    
+      </dependency>
 
       <dependency>
         <groupId>joda-time</groupId>
@@ -1017,6 +1017,22 @@ under the License.
       </dependency>
 
       <dependency>
+        <groupId>org.springframework.boot</groupId>
+        <artifactId>spring-boot-starter-web</artifactId>
+        <version>${spring-boot.version}</version>
+        <exclusions>
+          <exclusion>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-logging</artifactId>
+          </exclusion>
+          <exclusion>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-tomcat</artifactId>
+          </exclusion>
+        </exclusions>
+      </dependency>
+
+      <dependency>
         <groupId>org.apache.cxf</groupId>
         <artifactId>cxf-spring-boot-starter-jaxrs</artifactId>
         <version>${cxf.version}</version>
@@ -1158,13 +1174,13 @@ under the License.
         <artifactId>spring-security-config</artifactId>
         <version>${spring-security.version}</version>
       </dependency>
-    
+
       <dependency>
         <groupId>org.aspectj</groupId>
         <artifactId>aspectjweaver</artifactId>
         <version>1.9.5</version>
       </dependency>
-      
+
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-jexl3</artifactId>
@@ -1202,7 +1218,7 @@ under the License.
         <artifactId>slf4j-logging</artifactId>
         <version>${connid.version}</version>
       </dependency>
-      
+
       <dependency>
         <groupId>org.codehaus.groovy</groupId>
         <artifactId>groovy</artifactId>
@@ -1216,7 +1232,7 @@ under the License.
           <exclusion>
             <groupId>org.codehaus.groovy</groupId>
             <artifactId>groovy-xml</artifactId>
-          </exclusion>    
+          </exclusion>
         </exclusions>
       </dependency>
       <dependency>
@@ -1259,7 +1275,7 @@ under the License.
         <artifactId>groovy-groovysh</artifactId>
         <version>${groovy.version}</version>
       </dependency>
-    
+
       <dependency>
         <groupId>com.h2database</groupId>
         <artifactId>h2</artifactId>
@@ -1314,13 +1330,13 @@ under the License.
           </exclusion>
         </exclusions>
       </dependency>
-      
+
       <dependency>
         <groupId>org.jasypt</groupId>
         <artifactId>jasypt</artifactId>
         <version>${jasypt.version}</version>
       </dependency>
-      
+
       <dependency>
         <groupId>org.quartz-scheduler</groupId>
         <artifactId>quartz</artifactId>
@@ -1340,7 +1356,7 @@ under the License.
           </exclusion>
         </exclusions>
       </dependency>
-      
+
       <dependency>
         <groupId>org.apache.cocoon.sax</groupId>
         <artifactId>cocoon-sax</artifactId>
@@ -1361,17 +1377,33 @@ under the License.
             <groupId>xalan</groupId>
             <artifactId>xalan</artifactId>
           </exclusion>
+          <exclusion>
+            <groupId>org.apache.xmlgraphics</groupId>
+            <artifactId>batik-svg-dom</artifactId>
+          </exclusion>
+          <exclusion>
+            <groupId>org.apache.xmlgraphics</groupId>
+            <artifactId>batik-bridge</artifactId>
+          </exclusion>
+          <exclusion>
+            <groupId>org.apache.xmlgraphics</groupId>
+            <artifactId>batik-transcoder</artifactId>
+          </exclusion>
+          <exclusion>
+            <groupId>org.apache.xmlgraphics</groupId>
+            <artifactId>batik-extension</artifactId>
+          </exclusion>
         </exclusions>
       </dependency>
       <dependency>
         <groupId>org.apache.xmlgraphics</groupId>
         <artifactId>batik-i18n</artifactId>
-        <version>1.10</version>
+        <version>${batik.version}</version>
       </dependency>
       <dependency>
         <groupId>org.apache.xmlgraphics</groupId>
         <artifactId>batik-constants</artifactId>
-        <version>1.10</version>
+        <version>${batik.version}</version>
       </dependency>
 
       <!-- Flowable -->
@@ -1434,11 +1466,6 @@ under the License.
       <!-- CAS -->
       <dependency>
         <groupId>org.apereo.cas</groupId>
-        <artifactId>cas-server-core-api-configuration-model</artifactId>
-        <version>${cas.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>org.apereo.cas</groupId>
         <artifactId>cas-server-core</artifactId>
         <version>${cas.version}</version>
       </dependency>
@@ -1449,11 +1476,6 @@ under the License.
       </dependency>
       <dependency>
         <groupId>org.apereo.cas</groupId>
-        <artifactId>cas-server-core-validation-api</artifactId>
-        <version>${cas.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>org.apereo.cas</groupId>
         <artifactId>cas-server-core-authentication</artifactId>
         <version>${cas.version}</version>
       </dependency>
@@ -1464,11 +1486,6 @@ under the License.
       </dependency>
       <dependency>
         <groupId>org.apereo.cas</groupId>
-        <artifactId>cas-server-core-configuration-metadata-repository</artifactId>
-        <version>${cas.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>org.apereo.cas</groupId>
         <artifactId>cas-server-core-cookie</artifactId>
         <version>${cas.version}</version>
       </dependency>
@@ -1489,11 +1506,6 @@ under the License.
       </dependency>
       <dependency>
         <groupId>org.apereo.cas</groupId>
-        <artifactId>cas-server-core-services-api</artifactId>
-        <version>${cas.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>org.apereo.cas</groupId>
         <artifactId>cas-server-core-tickets</artifactId>
         <version>${cas.version}</version>
       </dependency>
@@ -1539,12 +1551,12 @@ under the License.
       </dependency>
       <dependency>
         <groupId>org.apereo.cas</groupId>
-        <artifactId>cas-server-support-jdbc</artifactId>
+        <artifactId>cas-server-support-reports</artifactId>
         <version>${cas.version}</version>
       </dependency>
       <dependency>
         <groupId>org.apereo.cas</groupId>
-        <artifactId>cas-server-support-reports</artifactId>
+        <artifactId>cas-server-support-syncope-authentication</artifactId>
         <version>${cas.version}</version>
       </dependency>
       <dependency>
@@ -1556,6 +1568,10 @@ under the License.
             <groupId>org.opensaml</groupId>
             <artifactId>opensaml-storage-impl</artifactId>
           </exclusion>
+          <exclusion>
+            <groupId>javax.mail</groupId>
+            <artifactId>mail</artifactId>
+          </exclusion>
         </exclusions>
       </dependency>
       <dependency>
@@ -1565,6 +1581,11 @@ under the License.
       </dependency>
       <dependency>
         <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-rest-service-registry</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
         <artifactId>cas-server-support-themes</artifactId>
         <version>${cas.version}</version>
       </dependency>
@@ -1592,6 +1613,10 @@ under the License.
             <groupId>org.opensaml</groupId>
             <artifactId>opensaml-storage-impl</artifactId>
           </exclusion>
+          <exclusion>
+            <groupId>com.sun.mail</groupId>
+            <artifactId>javax.mail</artifactId>
+          </exclusion>
         </exclusions>
       </dependency>
       <dependency>
@@ -1601,6 +1626,11 @@ under the License.
       </dependency>
       <dependency>
         <groupId>org.apereo.cas</groupId>
+        <artifactId>cas-server-support-aup-webflow</artifactId>
+        <version>${cas.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apereo.cas</groupId>
         <artifactId>cas-server-webapp-config</artifactId>
         <version>${cas.version}</version>
       </dependency>
@@ -1683,7 +1713,7 @@ under the License.
         </exclusions>
       </dependency>
       <!-- /Wicket -->
-      
+
       <dependency>
         <groupId>org.slf4j</groupId>
         <artifactId>slf4j-api</artifactId>
@@ -1751,7 +1781,7 @@ under the License.
         <artifactId>pdfbox</artifactId>
         <version>2.0.18</version>
       </dependency>
-      
+
       <dependency>
         <groupId>org.webjars</groupId>
         <artifactId>jquery</artifactId>
@@ -1796,7 +1826,7 @@ under the License.
             <artifactId>bootstrap</artifactId>
           </exclusion>
         </exclusions>
-      </dependency>      
+      </dependency>
       <dependency>
         <groupId>org.webjars</groupId>
         <artifactId>font-awesome</artifactId>
@@ -2025,7 +2055,7 @@ under the License.
         <scope>test</scope>
       </dependency>
     </dependencies>
-      
+
   </dependencyManagement>
 
   <repositories>
@@ -2039,16 +2069,6 @@ under the License.
         <enabled>true</enabled>
       </snapshots>
     </repository>
-    <repository>
-      <id>shibboleth-releases</id>
-      <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
-      <releases>
-        <enabled>true</enabled>
-      </releases>
-      <snapshots>
-        <enabled>false</enabled>
-      </snapshots>
-    </repository>
   </repositories>
 
   <pluginRepositories>
@@ -2092,7 +2112,7 @@ under the License.
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-compiler-plugin</artifactId>
-          <version>3.8.1</version> 
+          <version>3.8.1</version>
           <configuration>
             <release>${targetJdk}</release>
             <useIncrementalCompilation>false</useIncrementalCompilation>
@@ -2101,7 +2121,13 @@ under the License.
             <compilerArgument>-Xlint:unchecked</compilerArgument>
           </configuration>
         </plugin>
-        
+
+        <plugin>
+          <groupId>org.codehaus.mojo</groupId>
+          <artifactId>properties-maven-plugin</artifactId>
+          <version>1.0.0</version>
+        </plugin>
+
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-resources-plugin</artifactId>
@@ -2113,11 +2139,11 @@ under the License.
             </delimiters>
           </configuration>
         </plugin>
-        
+
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>build-helper-maven-plugin</artifactId>
-          <version>3.1.0</version>
+          <version>3.0.0</version>
         </plugin>
 
         <plugin>
@@ -2125,7 +2151,7 @@ under the License.
           <artifactId>maven-javadoc-plugin</artifactId>
           <version>3.1.1</version>
         </plugin>
-        
+
         <plugin>
           <groupId>org.apache.openjpa</groupId>
           <artifactId>openjpa-maven-plugin</artifactId>
@@ -2135,7 +2161,7 @@ under the License.
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-dependency-plugin</artifactId>
-          <version>3.1.2</version>
+          <version>3.1.1</version>
           <configuration>
             <outputDirectory>${bundles.directory}</outputDirectory>
             <useBaseVersion>true</useBaseVersion>
@@ -2198,13 +2224,13 @@ under the License.
             </artifactItems>
           </configuration>
         </plugin>
-        
+
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-jar-plugin</artifactId>
           <version>3.2.0</version>
         </plugin>
-        
+
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-war-plugin</artifactId>
@@ -2222,13 +2248,13 @@ under the License.
             </webResources>
           </configuration>
         </plugin>
-        
+
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-antrun-plugin</artifactId>
           <version>1.8</version>
         </plugin>
-        
+
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>xml-maven-plugin</artifactId>
@@ -2241,17 +2267,17 @@ under the License.
             </dependency>
           </dependencies>
         </plugin>
-        
+
         <plugin>
           <groupId>org.springframework.boot</groupId>
           <artifactId>spring-boot-maven-plugin</artifactId>
           <version>${spring-boot.version}</version>
         </plugin>
-        
+
         <plugin>
           <groupId>org.codehaus.cargo</groupId>
           <artifactId>cargo-maven2-plugin</artifactId>
-          <version>1.7.11</version>
+          <version>1.7.10</version>
           <configuration>
             <configuration>
               <type>standalone</type>
@@ -2265,7 +2291,7 @@ under the License.
             </configuration>
           </configuration>
         </plugin>
-        
+
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-surefire-plugin</artifactId>
@@ -2294,7 +2320,7 @@ under the License.
             </execution>
           </executions>
         </plugin>
-        
+
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-checkstyle-plugin</artifactId>
@@ -2329,7 +2355,7 @@ under the License.
           <artifactId>buildnumber-maven-plugin</artifactId>
           <version>1.4</version>
         </plugin>
-              
+
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>nbm-maven-plugin</artifactId>
@@ -2341,13 +2367,13 @@ under the License.
           <artifactId>exec-maven-plugin</artifactId>
           <version>1.6.0</version>
         </plugin>
-        
+
         <plugin>
           <groupId>org.antlr</groupId>
           <artifactId>antlr4-maven-plugin</artifactId>
           <version>${antlr4.version}</version>
         </plugin>
-        
+
         <plugin>
           <groupId>nl.geodienstencentrum.maven</groupId>
           <artifactId>sass-maven-plugin</artifactId>
@@ -2387,7 +2413,7 @@ under the License.
                 <requireMavenVersion>
                   <version>3.5.0</version>
                 </requireMavenVersion>
-              </rules> 
+              </rules>
             </configuration>
           </execution>
         </executions>
@@ -2492,7 +2518,7 @@ under the License.
           </execution>
         </executions>
       </plugin>
-      
+
       <plugin>
         <groupId>org.apache.rat</groupId>
         <artifactId>apache-rat-plugin</artifactId>
@@ -2503,7 +2529,7 @@ under the License.
             <exclude>**/nb-configuration.xml</exclude>
             <exclude>**/META-INF/cxf/**</exclude>
             <exclude>**/META-INF/services/**</exclude>
-            <exclude>**/META-INF/MANIFEST.MF</exclude>            
+            <exclude>**/META-INF/MANIFEST.MF</exclude>
             <exclude>**/*.csv</exclude>
             <exclude>**/archetype-resources/**</exclude>
             <exclude>**/AdminLTE*/**</exclude>
@@ -2534,7 +2560,7 @@ under the License.
           </execution>
         </executions>
       </plugin>
-      
+
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-remote-resources-plugin</artifactId>
@@ -2589,7 +2615,7 @@ under the License.
           </execution>
         </executions>
       </plugin>
-      
+
       <plugin>
         <groupId>org.codehaus.mojo</groupId>
         <artifactId>ianal-maven-plugin</artifactId>
@@ -2677,7 +2703,7 @@ under the License.
             <link>https://docs.spring.io/spring-security/site/docs/current/api/</link>
             <link>http://www.flowable.org/docs/javadocs/</link>
             <link>https://build.shibboleth.net/nexus/content/sites/site/java-opensaml/3.3.1/apidocs/</link>
-            <link>https://artifacts.elastic.co/javadoc/org/elasticsearch/elasticsearch/7.6.1/index.html</link>
+            <link>https://artifacts.elastic.co/javadoc/org/elasticsearch/elasticsearch/7.6.0/index.html</link>
             <link>http://docs.swagger.io/swagger-core/v2.1.1/apidocs/</link>
           </links>
         </configuration>
@@ -2750,7 +2776,7 @@ under the License.
               <dependency>
                 <groupId>org.asciidoctor</groupId>
                 <artifactId>asciidoctorj-pdf</artifactId>
-                <version>1.5.3</version>
+                <version>1.5.2</version>
               </dependency>
             </dependencies>
             <configuration>
@@ -2845,7 +2871,7 @@ under the License.
           <plugin>
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-site-plugin</artifactId>
-            <version>3.9.0</version>
+            <version>3.8.2</version>
             <configuration>
               <locales>en</locales>
               <generateProjectInfo>false</generateProjectInfo>
diff --git a/wa/pom.xml b/wa/pom.xml
index 3850226..2bdb8b0 100644
--- a/wa/pom.xml
+++ b/wa/pom.xml
@@ -215,6 +215,13 @@ under the License.
     <profile>
       <id>debug</id>
 
+      <dependencies>
+        <dependency>
+          <groupId>org.springframework.boot</groupId>
+          <artifactId>spring-boot-devtools</artifactId>
+        </dependency>
+      </dependencies>
+
       <build>
         <defaultGoal>clean package spring-boot:run</defaultGoal>
 
@@ -283,4 +290,10 @@ under the License.
     </profile>
   </profiles>
 
+  <repositories>
+    <repository>
+      <id>shibboleth</id>
+      <url>https://build.shibboleth.net/nexus/content/groups/public</url>
+    </repository>
+  </repositories>
 </project>
diff --git a/wa/src/main/resources/static/images/logo.png b/wa/src/main/resources/static/images/logo.png
new file mode 100644
index 0000000..f05105e
Binary files /dev/null and b/wa/src/main/resources/static/images/logo.png differ
diff --git a/wa/src/main/resources/templates/fragments/footer.html b/wa/src/main/resources/templates/fragments/footer.html
new file mode 100644
index 0000000..d991bf5
--- /dev/null
+++ b/wa/src/main/resources/templates/fragments/footer.html
@@ -0,0 +1,30 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements.  See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership.  The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License.  You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied.  See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<footer class="py-4 d-flex flex-column justify-content-center cas-footer text-center">
+  <div class="pb-1 pt-1">
+    Copyright © 2010-${year}
+    <a href="http://www.apache.org/" target="_blank" rel="noopener noreferrer">The Apache Software Foundation</a>.</strong>
+    All rights reserved.
+  </div>
+  <div class="pb-1 pt-1">
+    <span id="copyright" th:utext="#{copyright}" class="mr-2 d-inline-block">Copyright Date Apereo, Inc</span>
+    <span class="mr-2 d-inline-block">Powered by <a href="https://github.com/apereo/cas">Apereo CAS</a></span>
+    <code class="version" th:text="${T(org.apereo.cas.util.CasVersion).getVersion() + ' ' + T(org.apereo.cas.util.CasVersion).getDateTime()}"></code>
+  </div>
+</footer>
diff --git a/wa/src/main/resources/templates/fragments/header.html b/wa/src/main/resources/templates/fragments/header.html
new file mode 100644
index 0000000..f128dc9
--- /dev/null
+++ b/wa/src/main/resources/templates/fragments/header.html
@@ -0,0 +1,217 @@
+<!DOCTYPE html>
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements.  See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership.  The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License.  You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied.  See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<html lang="en">
+
+<head>
+    <meta charset="UTF-8">
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
+
+    <title>Header Fragment</title>
+    <link href="../../static/css/cas.css" rel="stylesheet" th:remove="tag" />
+</head>
+
+<body>
+    <div th:fragment="header">
+        <header id="app-bar" class="mdc-top-app-bar mdc-top-app-bar--fixed mdc-elevation--z4">
+            <nav class="mdc-top-app-bar__row">
+                <section class="mdc-top-app-bar__section mdc-top-app-bar__section--align-start">
+                    <!--<button class="mdc-icon-button mdc-top-app-bar__navigation-icon">
+                        <span class="mdi mdi-menu"></span>
+                        <span class="sr-only">menu</span>
+                    </button>-->
+                </section>
+                <section class="mdc-top-app-bar__section mdc-top-app-bar__section--align-center">
+                    <span class="cas-brand mx-auto">
+                        <span class="sr-only">Apache Syncope</span>
+                        <img th:src="@{'/images/logo.png'}" />
+                    </span>
+                </section>
+                <section class="mdc-top-app-bar__section mdc-top-app-bar__section--align-end">
+                    <button id="cas-notifications-menu"
+                        class="mdc-icon-button mdc-top-app-bar__action-item cas-notification-toggle"
+                        aria-label="Bookmark this page">
+                        <span class="mdi mdi-bell-alert"></span>
+                        <span class="sr-only">notifications</span>
+                        <i id="notifications-count" class="notifications-count count">2</i>
+                    </button>
+                </section>
+            </nav>
+
+        </header>
+        <aside id="app-drawer" class="mdc-drawer mdc-drawer--dismissible mdc-drawer--modal">
+            <div class="mdc-drawer__header">
+                <h3 class="mdc-drawer__title">CAS</h3>
+                <h6 class="mdc-drawer__subtitle">Central Authentication Service</h6>
+            </div>
+            <div class="mdc-drawer__content">
+                <nav class="mdc-list">
+                    <a th:href="@{/actuator}" class="mdc-list-item">
+                        <i class="mdi mdi-cogs"></i>&nbsp;
+                        <span class="mdc-list-item__text">[[#{cas.login.resources.endpoints}]]</span>
+                    </a>
+                    <hr class="mdc-list-divider" />
+                    <a class="mdc-list-item" href="https://apereo.github.io/cas">
+                        <i class="mdi mdi-file-code-outline"></i>&nbsp;
+                        <span class="mdc-list-item__text">[[#{cas.login.resources.wiki}]]</span>
+                    </a>
+                    <a class="mdc-list-item" href="https://github.com/apereo/cas/pulls">
+                        <i class="mdi mdi-call-merge"></i>&nbsp;
+                        <span class="mdc-list-item__text">[[#{cas.login.resources.pulls}]]</span>
+                    </a>
+                    <a class="mdc-list-item" href="https://apereo.github.io/cas/developer/Contributor-Guidelines.html">
+                        <i class="mdi mdi-information"></i>&nbsp;
+                        <span class="mdc-list-item__text">[[#{cas.login.resources.contribguide}]]</span>
+                    </a>
+                    <a class="mdc-list-item" href="https://apereo.github.io/cas/Support.html">
+                        <i class="mdi mdi-help-circle"></i>&nbsp;
+                        <span class="mdc-list-item__text">[[#{cas.login.resources.support}]]</span>
+                    </a>
+                    <a class="mdc-list-item" href="https://apereo.github.io/cas/Mailing-Lists.html">
+                        <i class="mdi mdi-email-newsletter"></i>&nbsp;
+                        <span class="mdc-list-item__text">[[#{cas.login.resources.mailinglist}]]</span>
+                    </a>
+                    <a class="mdc-list-item" href="https://gitter.im/apereo/cas">
+                        <i class="mdi mdi-message-text"></i>&nbsp;
+                        <span class="mdc-list-item__text">[[#{cas.login.resources.chat}]]</span>
+                    </a>
+                    <a class="mdc-list-item" href="https://apereo.github.io/">
+                        <i class="mdi mdi-post"></i>&nbsp;
+                        <span class="mdc-list-item__text">[[#{cas.login.resources.blog}]]</span>
+                    </a>
+                </nav>
+            </div>
+        </aside>
+
+        <script>var countMessages = 0;</script>
+        <div class="mdc-dialog cas-notification-dialog" id="cas-notification-dialog" role="alertdialog"
+            aria-modal="true" aria-labelledby="notif-dialog-title" aria-describedby="notif-dialog-content">
+            <div class="mdc-dialog__container">
+                <div class="mdc-dialog__surface">
+                    <h2 class="mdc-dialog__title mt-2" id="notif-dialog-title">
+                        Notifications
+                    </h2>
+                    <div class="mdc-dialog__content" id="notif-dialog-content">
+                        <div class="cas-notification-message mdc-typography--body1" th:if="${staticAuthentication}">
+                            <script>countMessages++;</script>
+                            <h5 class="mdc-typography--headline6" th:utext="#{screen.defaultauthn.title}" />
+                            <p class="text text-wrap small" th:utext="#{screen.defaultauthn.heading}">
+                                Static AuthN is ONLY useful for demo purposes. It is recommended that you connect CAS to
+                                LDAP,
+                                JDBC, etc
+                                instead.
+                            </p>
+                        </div>
+                        <div class="cas-notification-message mdc-typography--body1"
+                            th:if="${not #httpServletRequest.secure}">
+                            <h5 class="mdc-typography--headline6" th:utext="#{screen.nonsecure.title}" />
+                            <script>countMessages++;</script>
+                            <p class="text-wrap small" th:utext="#{screen.nonsecure.message}">
+                                Unsure Connection
+                            </p>
+                        </div>
+                    </div>
+                    <footer class="mdc-dialog__actions">
+                        <button type="button" class="mdc-button mdc-dialog__button" data-mdc-dialog-action="accept"
+                            data-mdc-dialog-button-default>
+                            <span class="mdc-button__label">OK</span>
+                        </button>
+                    </footer>
+                </div>
+            </div>
+            <div class="mdc-dialog__scrim"></div>
+        </div>
+        <script type="text/javascript">
+            
+            (function (material) {
+                var header = {
+                    init: function () {
+                        header.attachTopbar();
+                        material.autoInit();
+                    },
+                    attachDrawer: function () {
+                        var elm = document.getElementById('app-drawer');
+                        var drawer = material.drawer.MDCDrawer.attachTo(elm);
+                        var closeDrawer = function (evt) {
+                            drawer.open = false;
+                        };
+                        drawer.foundation_.handleScrimClick = closeDrawer;
+                        document.onkeydown = function (evt) {
+                            evt = evt || window.event;
+                            if (evt.keyCode == 27) {
+                                closeDrawer();
+                            }
+                        };
+
+                        header.drawer = drawer;
+
+                        return drawer;
+                    },
+                    attachTopbar: function (drawer) {
+                        var drawer = header.attachDrawer();
+                        var dialog = header.attachNotificationDialog();
+                        header.attachDrawerToggle(drawer);
+                        header.attachNotificationToggle(dialog);
+                    },
+                    checkCaps: function (ev) {
+                        var s = String.fromCharCode(ev.which);
+                        if (s.toUpperCase() === s && s.toLowerCase() !== s && !ev.shiftKey) {
+                            ev.target.parentElement.classList.add('caps-on');
+                        } else {
+                            ev.target.parentElement.classList.remove('caps-on');
+                        }
+                    },
+                    attachDrawerToggle: function (drawer) {
+                        var topAppBar = material.topAppBar.MDCTopAppBar.attachTo(document.getElementById('app-bar'));
+                        topAppBar.setScrollTarget(document.getElementById('main-content'));
+                        topAppBar.listen('MDCTopAppBar:nav', function () {
+                            drawer.open = !drawer.open;
+                        });
+                        return topAppBar;
+                    },
+                    attachNotificationDialog: function () {
+                        var element = document.getElementById('cas-notification-dialog');
+                        var dialog = material.dialog.MDCDialog.attachTo(element);
+                        return dialog;
+                    },
+                    attachNotificationToggle: function (dialog) {
+                        var btn = document.getElementById('cas-notifications-menu');
+                        btn.addEventListener('click', () => {
+                            dialog.open();
+                        });
+                    }
+                }
+
+
+                document.addEventListener('DOMContentLoaded', function () {
+                    header.init();
+
+                    if (countMessages == 0) {
+                        window.jQuery('#notifications-count').remove();
+                    } else {
+                        window.jQuery('#notifications-count').text("(" + countMessages + ")")
+                    }
+                });
+            })(mdc);
+        </script>
+    </div>
+</body>
+
+</html>