authentication - User management and single-sign on over REST -

i building web application front-end coded in angular. front-end access bunch of web-services coded in java/spring. there might other ways people may try access webservices such desktop tool. need secure whole infrastructure.

i need way maintain user repository, i.e. provision users , manage users, roles etc.:

• users should able register , have emails verified.
• admin should able approve users , assign them roles, delete users, update them etc.

i need single sign on functionality. once login through webfront end, should able access rest based webservices seamlessly (depending upon role have).

i not need support millions of users, light-weight preferable.

i looking open-source solution(s) can:

• allow user management (ideally on rest based api , have own user interfaces well)
• allow single-sign-on functionality web frontend , webservices, , potentially desktop apps may need implemented.

i have tried apache syncope seemed promising provided rest based apis. thinking of using cas. however, default ui seemed kludgy , cas doesn't directly support rest. looking @ shibboleth , openidm - none seems meeting requirement directly.

i'll appreciate suggestions on options/stack can consider this. ideally, single solution or integrated solution on java/spring stack might work better me.

you should have @ https://github.com/openmf/mifosx java , springs restfull web service.

and https://github.com/openmf/community-app there angularjs web app.

plus can find live demo link on there repository. username mifos , password password.

it ment microfinance can study architecture implementation , use there core functionalities, amazing.