Identity Management Headlines

Troubleshooting OpenSSO with Firefox Add-Ons: Part 5, Identity Provider Initiated Fedlet Single Sign-On

Wed, 11 Nov 2009 11:00:00 PST

Use the Firefox web browser to explore an OpenSSO identity provider initiated fedlet deployment.

Webinar: Increase Compliance, Access Control, and Performance

Wed, 04 Nov 2009 12:00:00 PST

Listen to this webinar replay and find out how the latest versions of Directory Server Enterprise Edition 7.0 and Role Manger 5.0 help you to achieve compliance, control, security, and performance.

Troubleshooting OpenSSO with Firefox Add-Ons: Part 4, Service Provider Initiated Fedlet Single Sign-On

Wed, 04 Nov 2009 12:00:00 PST

Use the Firefox web browser to explore an OpenSSO service provider initiated fedlet deployment.

Open-Source Starter Kit: Federating to Salesforce CRM With OpenSSO

Mon, 19 Oct 2009 12:00:00 PST

This article explains how to simultaneously control access to in-house applications and those hosted by the SaaS provider Salesforce by using OpenSSO. (Login or registration required.)

Enabling Web Service Security With OpenSSO WSS Agent

Mon, 28 Sep 2009 12:00:00 PST

Learn how to write a web service with JAX-WS, secure it with OpenSSO WSS Agent, and deploy it on Tomcat, JBoss, WebLogic, GlassFish, and WebSphere.

Enabling IP/Resource/Environment Based Authentication With OpenSSO

Fri, 18 Sep 2009 12:00:00 PST

In this three-part article series, detailed use cases show how OpenSSO server and policy agents can improve a user's experience with access control.

Delegating XML Gateway Runtime Authorization to OpenSSO

Fri, 04 Sep 2009 12:00:00 PST

Learn how access control rules defined in OpenSSO can be enforced at runtime by SecureSpan XML Gateway through its native OpenSSO integration agent.

Securing REST Web Services With OAuth

Thu, 20 Aug 2009 12:00:00 PST

Learn how to use the open-source protocol OpenAuth and OpenSSO extensions to secure a RESTful web service.

A Planning Guide for Moving to LDAP as Naming Service in the Solaris OS

Fri, 01 May 2009 12:00:00 PST

Moving from Network Information Service (NIS) or NIS+ to Lightweight Directory Access Protocol (LDAP)? Read this first. Topics include DIT design and implementation of a hybrid DIT.

Get Going With Starter Kits

Wed, 22 Apr 2009 10:00:00 PST

Get up and running with free identity management starter kits. Complete with technical articles and video demos, starter kits help you solve specific business challenges that can easily be addressed through simple open-source development. The Federated Single Sign-On to Google Apps and OpenDS as a Naming Service for OpenSolaris starter kits are now available.

Troubleshooting OpenSSO with Firefox Add-Ons, Part 3: Cross-Domain Single Sign-On

Mon, 13 Apr 2009 12:00:00 PST

Explore the complex interaction between OpenSSO and the policy agent in a deployment designed for cross-domain single sign-on.

Using OpenSSO To Protect Java EE Applications, Part 1: Setting Up X.509 Client Authentication

Fri, 02 Apr 2009 01:00:00 PST

Learn how to protect your Java EE applications with client certificates in OpenSSO.

Troubleshooting OpenSSO with Firefox Add-Ons: Part 1, Introduction

Thu, 19 Mar 2009 11:55:00 PST

OpenSSO deployments can be complex and difficult to debug. In this article, learn how to troubleshoot your OpenSSO deployments with Firefox add-ons. Part 1 describes configuration and setup; Part 2 takes you through a simple single sign-on and policy protection example.

Leveraging Identity with GlassFish and MySQL

Fri, 06 Mar 2009 12:00:00 PST

This paper describes what identity management is, how to install and configure Sun Identity Manager using GlassFish and MySQL, and compares the TCO for this solution to other vendors' offerings. (Registration required.)

Directory Server 6.3.1 Released

Fri, 06 Mar 2009 12:00:00 PST

The 6.3.1 release is a patch to the existing 6.x deployment that provides a way to apply the latest fixes and updates found in Directory Server, Directory Proxy Server, and Directory Server Control Center components in one installation event.

OpenID.sun.com: A Sun Java System Web Server 7.0 Reference Deployment

Fri, 27 Feb 2009 10:00:00 PST

Read about the architecture and configuration of OpenID.sun.com, which runs on Sun Java System Web Server 7.0 and enables Sun employees to access sites that leverage OpenID for authentication purposes. (Registration required.)

Maximizing Performance of the Sun Java System Directory Server

Fri, 20 Feb 2009 12:00:00 PST

This article describes ways to improve the performance of the Sun Java System Directory Server, notably timeouts from Linux clients.

2009 JavaOne Conference, June 2-5, San Francisco, CA

Fri, 20 Feb 2009 12:00:00 PST

Stay on top of everything new and different, both inside and around Java technology. Register by April 22, 2009, and save $200 off a Conference Pass or Conference Plus Pass. Register now.

Enabling Virtual Federation With OpenSSO, Part 2: A Tutorial

Fri, 13 Feb 2009 09:00:00 PST

Configure OpenSSO for virtual federation and for secure attributes exchange. Enjoy the benefits of a secure, loosely coupled, and centralized federation solution. Read on for details and an overview of the end-to-end virtual federation process.

See also Part 1, which introduces virtual federation and its business advantages.

Enabling Virtual Federation With OpenSSO, Part 1: Introduction

Fri, 16 Jan 2009 12:00:00 PST

What challenges are businesses facing in identity federation? How does OpenSSO's virtual federation capability tackle them so that your identity and federation infrastructure is simple, secure, and standardized? Read this article for the answers.

Perspectives on Quality Assurance for OpenDS

Thu, 08 Jan 2009 09:00:00 PST

OpenDS is Sun's open-source project for developing a next-generation directory service. In this article, QA lead Gary Williams elaborates on the project's testing aspect: opportunities, challenges, guidelines, practices, measurements.

Identities in a Service-Oriented World: Identity as a Service

Mon, 05 Jan 2009 01:00:00 PST

This paper discusses current innovations within SOA and Web 2.0 environments, as well as security considerations. (Also available in German-language version.)

Protecting Java EE Applications With OpenSSO Policy Agents, Part 2: Same-Domain SSO

Mon, 15 Dec 2008 03:00:00 PST

How to configure OpenSSO so that certain resources on your secured application are publicly accessible with no authentication required? Read this article for the procedure. Also included is an overview of the types of single sign-on.

See Part 1 for how to secure Web applications with OpenSSO Policy Agents.

Federated Single Sign-On for Salesforce in OpenSSO

Mon, 08 Dec 2008 09:00:00 PST

Learn how to implement federated SSO for Salesforce CRM software with an open-standards-based approach, featuring OpenSSO as the identity provider. That way, you preserve the confidentiality of user login credentials and eliminate the need for multiple logins.

Single Sign-On for SugarCRM Through a SAML-Based Integration of OpenSSO and simpleSAMLphp

Mon, 01 Dec 2008 12:00:00 PST

With PHP-based SugarCRM as an example, this article shows you how to enforce SSO in a PHP environment. The process integrates OpenSSO, Sun's open-source Web access management project, with an application in the LAMP [Linux, Apache, MySQL, and PHP] or SAMP [Solaris and AMP] stack. Here, simpleSAMLphp acts as the front end for SugarCRM.

Protecting Java EE Applications With OpenSSO Policy Agents, Part 1: Basic Steps

Mon, 24 Nov 2008 03:00:00 PST

Writing security code and configuring the security model for Web applications can be cumbersome. The open-source project OpenSSO offers many security-related capabilities for applications: authentication, authorization, single sign on, identity services, security for Web services. This article describes how to easily protect Web applications with the OpenSSO Policy Agents in just a few steps.

Federated Single Sign-On for Google Apps in OpenSSO

Wed, 12 Nov 2008 03:00:00 PST

Federating single sign-on with OpenSSO is fast, straightforward, and intuitive. This article describes the process for highly popular Google Apps.

Sun OpenSSO Enterprise 8.0 Released

Tue, 11 Nov 2008 03:00:00 PST

Sun OpenSSO Enterprise delivers integrated access management, federation, and secured Web services in an easy-to-deploy Java package. Based on Project OpenSSO, OpenSSO Enterprise offers a fully supported and indemnified open-source solution for internal and external single sign-on, protecting access both within and outside the enterprise. Download it for free!

Using Sun Java System Web Server With Sun Identity Manager and MySQL

Tue, 21 Oct 2008 01:00:00 PST

Find out how to install Sun Identity Manager on top of a Web server instead of an application server with a MySQL database. This article also describes how to perform initial deployment tasks.

From the Trenches at Sun Identity, Part 8: Quality Assurance

Marina Sum — Tue, 14 Oct 2008 09:00:00 PST

In this interview, Indira Thangasamy, senior quality engineering manager for Sun OpenSSO Enterprise, offers insights on the behind-the-scenes testing harness and processes that ensure a high-quality product.

Ask the Experts Transcript: OpenSSO

Tue, 07 Oct 2008 10:00:00 PST

Will OpenSSO support Active Directory to integrate with Windows authentication? Will it support all the databases like SQL 2005/2008 and Oracle 11g? Find the answers to these and a variety of other questions about OpenSSO in the Ask the Experts transcript.

Deploying OpenSSO on GlassFish Application Server

Fri, 26 Sep 2008 12:00:00 PST

Go open source for identity management! Deployment of OpenSSO on GlassFish application server results in an ideal environment for developing secure Web applications. This article describes the basic deployment process, including the predeployment and configuration steps.

Ask the Experts About OpenSSO: September 29-October 3

Fri, 26 Sep 2008 12:00:00 PST

Got a question about OpenSSO, Sun's open-source project for access management, identity federation, and Web services? Post it during the week of September 29 and get answers from key members of Sun's access and federation management team.

From the Trenches at Sun Identity, Part 7: Security for Web Services

Thu, 11 Sep 2008 12:00:00 PST

What are Web services and why are the data they transmit highly insecure? How do you protect the data interactions? What role does OpenSSO play? Sidharth Mishra, technical product manager for identity management at Sun, answers those questions in this interview.

Join a Second Life Session on OpenSSO at 8:00 a.m. PT, Tuesday, September 30

Thu, 11 Sep 2008 12:00:00 PST

Meet with Sun's Daniel Raskin and Jamie Nelson in a live chat on OpenSSO's solutions for internal access management, extranet authentication, federation, and security for web services. Register for a confirmation of the details.

Integrating Applications With OpenSSO

Tue, 26 Aug 2008 03:00:00 PST

Learn the four ways in which to integrate web applications with OpenSSO: through the Policy Agent, a reverse proxy, the client SDK, and identity services. In addition, this article features a Ruby on Rails sample application and shows you how to secure its login process with identity services.

From the Trenches at Sun Identity, Part 6: Identity Services for Securing Web Applications

Mon, 18 Aug 2008 06:00:00 PST

In this interview, Sun identity architect Aravindan Ranganathan explains why OpenSSO's identity services are an ideal architecture for protecting applications from unauthorized access. He also describes the related tasks, the benefits, and the plans for integrating identity services with the federation capability in OpenSSO.

Download NetBeans IDE 6.5 Beta

Mon, 18 Aug 2008 06:00:00 PST

Efficiently create web, enterprise, desktop, and mobile applications with the language of your choice: Java, C/C++ , JavaScript, Ruby, Groovy, or PHP.

Setting Up OpenDS 1.0.0 as a Naming Service for the OpenSolaris OS, Part 2 of 2: Advanced Configurations

Wed, 06 Aug 2008 09:10:00 PST

To complete the process, configure for UNIX user authentication and for Digest-MD5 or CRAM-MD5 authentication before setting up the clients. This article walks you through the procedures and describes how to optimize for performance and edit Java settings. Read Part 1.

Sun Announces OpenDS Standard Edition (SE) 1.0

Wed, 06 Aug 2008 09:10:00 PST

Commercial support and indemnification are now available for OpenDS, Sun's open-source, LDAP directory server that's written in the Java language. Also read about the many ways in which you can participate in OpenDS.

Securing Applications With Identity Services, Part 4: Single Sign-On and Logout

Wed, 30 Jul 2008 09:00:00 PST

Learn how to achieve SSO and logout by means of OpenSSO-supported REST operations. By way of demonstration, this article hosts a sample application, accompanied by the related setup procedures and code segments.

From the Trenches at Sun Identity, Part 5: Support for OpenSSO

Wed, 23 Jul 2008 12:00:00 PST

Breaking news: Sun is offering full support and indemnification for its open Web access management and federation project. In this interview, senior product manager Nick Wooler describes the background, the support model, and the gains for developers.

Setting Up OpenDS 1.0.0 as a Naming Service for the OpenSolaris OS, Part 1 of 2: Basic Steps

Tue, 16 Jul 2008 09:30:00 PST

Take advantage of the newly shipped OpenDS, an open-source, LDAP directory server written in the Java language. This series explains, step by step, the intuitive setup procedure for OpenDS on the OpenSolaris OS.

OpenDS 1.0.0, Open-Source LDAP Directory Server in Java Language, Ships

Mon, 14 Jul 2008 12:00:00 PST

Free and open with many standard and experimental extensions, maximum interoperability with clients, rich APIs, a multimaster replication model, and other benefits. Take it for a spin!

Sun Net Talk: Sun Identity Manager 8.0

Mon, 14 Jul 2008 12:00:00 PST

Watch this webcast to see how this latest release's new features address key identity management challenges.

Multimaster Deployment of Sun Java System Directory Server Enterprise Edition 6

Tue, 08 Jul 2008 12:00:00 PST

Sun Java System Directory Server EE 6 allows unlimited master directory servers. Read about the benefits of deploying an exclusively multimaster topology instead of a master, consumer, and replication hub topology.

Sun Identity Manager 8.0 Released

Fri, 27 Jun 2008 08:00:00 PST

The latest version of Identity Manager offers numerous product enhancements and new functionality, including data export, comprehensive attestation capabilities, and improved integration of business roles. Download it now.

Access Manager FAQ: Performance and Sizing, Policy, Session Failover and Deployment, and Agents

Tue, 17 Jun 2008 03:30:00 PST

Besides helpful tips on performance optimization and configurations, these Q&As also offer best practices and resolutions for error scenarios.

Second Segment of Access Manager FAQ on SAML

Thu, 05 Jun 2008 09:15:00 PST

Read more tips and guidelines: resolving errors, enabling basic authentication, mapping the SAML 2.0 Authentication Context, differentiating between the Post Profile and the Artifact Profile.

From the Trenches at Sun Identity, Part 4: Virtual Federation, a Pioneering Way for Exchanging Authentication Data

Wed, 28 May 2008 12:15:00 PST

Sun identity architect Rajeev Angal describes the challenges enterprises face with federation and explains how virtual federation, a unique capability in the upcoming Sun Federated Access Manager, effectively resolves all the issues.

Resetting the admin Password in Sun Java System Directory Server

Mon, 19 May 2008 01:10:00 PST

In a fix and need to reset the admin password for Sun Java System Directory Server? This tip tells you how.

Updated: Securing Applications With Identity Services, Part 1: Authentication

Fri, 09 May 2008 01:10:00 PST

Learn how to configure OpenSSO so as to authenticate users with identity-service interfaces that support SOAP with WSDL and REST. This updated article reflects the latest UI and parameters for the REST operations.

An Overview and Demonstration of OpenSSO and Federation

Wed, 07 May 2008 01:00:00 PST

At CommunityOne 2008, Sun's identity management experts describe the latest model of effecting single sign-on and the process of federating across enterprises with OpenSSO.

A Rundown on OpenDS

Tue, 06 May 2008 01:00:00 PST

Ludovic Poitou, community lead for OpenDS; and Jim Yang, project lead for Penrose, a Java technology-based directory server, presented at CommunityOne on the topic, "Getting Started on OpenDS." This recap summarizes the goals, status, installation, and extensibility of OpenDS, also the infrastructure of Penrose, whose default provider is OpenDS.

Identity Management at CommunityOne

Mon, 30 Apr 2008 01:00:00 PST

Come to CommunityOne on May 5 in San Francisco and attend an OpenSSO Workshop and a session on Getting Started With OpenDS. Registration is free.

Securing Applications With Identity Services, Part 3: User Attributes

Wed, 16 Apr 2008 01:00:00 PST

Identity services are interfaces that support authentication, authorization, and other related services with SOAP or REST technology. This article steps you through the procedure for obtaining, through the attribute service, the attributes of users whose tokens are passed in service calls.

From the Trenches at Sun Identity, Part 3: Federated Access Management Simplified

Thu, 10 Apr 2008 03:00:00 PST

Senior product line manager Daniel Raskin discusses the background for merging two of Sun's access and federation management products and the new capabilities that focus on simplicity, ease of use, efficiency, and convenience.

From the Trenches at Sun Identity, Part 2: OpenSSO, a Thriving Community

Mon, 24 Mar 2008 01:00:00 PST

Sun federation architect Pat Patterson reflects on OpenSSO, Sun's open-source project for single sign-on, outlining its mission, adoption, challenges, future, and an unexpected boon to Sun. OpenSSO is a twin of Sun Java System Access Manager.

From the Trenches at Sun Identity, Part 1: Access Management for Web Applications

Mon, 17 Mar 2008 01:00:00 PST

In this interview, Jamie Nelson, Sun's director of engineering for access and federation management, points out a major oversight in Web development, elaborates on the current state of single sign-on, and suggests the right tool and the right platform for securing application access.

Two New FAQ Segments for Sun Java System Access Manager

Wed, 12 Mar 2008 01:00:00 PST

Here are Q&As on identity management and the service management SDK. The topics range from configurations to the Identity Repository to realms to attributes.

Federated Identity Through the Eyes of the Deployer

Fri, 29 Feb 2008 01:00:00 PST

What identity-related challenges do application deployers face? What considerations are involved in setting up a single sign-on solution so that users can authenticate elsewhere before accessing your application? What are the popular federated identity protocols? What questions must you ponder before adopting a standardized solution? Find the answers, along with tips and guidelines, in this article.

Building and Running OpenDS With NetBeans IDE

Fri, 15 Feb 2008 01:00:00 PST

In only a few steps, you can build, debug, and run OpenDS--the open-source project for Sun's next-generation directory services products--in the NetBeans IDE. This article walks you through the process with screen shots.

Perl Scripts Offer Quick, Accurate Installation and Configuration of Sun Java System Directory Server

Mon, 11 Feb 2008 01:00:00 PST

Automation eradicates manual, duplicate tasks and achieves efficiency, accuracy, and uniformity. Through an example, this article shows you how to automate installation and configuration of Sun Java System Directory Server with Perl scripts.

Authenticate With Sun Java System Access Manager and ActivIdentity 4TRESS Authentication Server

Mon, 04 Feb 2008 01:00:00 PST

A win-win integration story: You can now adopt 4TRESS one-time password (OTP) authentication schemes in Access Manager and thus secure applications with a wider range of OTP schemes in an Access Manager-protected environment.

Sun Technical Specialist on Identity and OpenSSO Extensions

Mon, 28 Jan 2008 01:00:00 PST

Paul Bryan talks with Marina Sum about his background in identity development, the history and future of Sun Java System Access Manager, OpenID, the subproject OpenSSO Extensions, and the solutions for phishing.

A Five-Star Score for Sun Java System Identity Manager

Wed, 23 Jan 2008 01:00:00 PST

Cheers to Identity Manager! SC Magazine has awarded its version 7.1 five stars in an overall rating with full marks in features, performance, documentation, and support.

Developing Secure Applications With Sun Java System Access Manager, Part 2: Advanced Authorization

Thu, 03 Jan 2008 01:00:00 PST

As a sequel to Part 1, this article describes how to extend the authorization of Sun Java System Access Manager with a hierarchy-based resource model and interoperable Web services for .NET applications.

New Section for Sun Java System Access Manager and Sun Java System Federation Manager FAQ: Liberty Alliance and Security Assertion Markup Language

Read about the support for SAML, Liberty Alliance-based and other federation standards, the identity-based services in Access Manager, the utilities for creating and maintaining federated connections, the components in Federation Manager, and many other pertinent topics.

Gartner Places Sun Java System Access Manager in Leaders Quadrant

A significant milestone!

Securing Applications With Identity Services, Part 2: Authorization

Learn how to configure OpenSSO with identity services so as to allow users to perform tasks for which they have been authorized. Identity services are interfaces that support authentication, authorization, and other related services with SOAP or REST technology.

Two New Sections for Sun Java System Access Manager and Sun Java System Federation Manager FAQ

Two new sections are now available: Authentication and Single Sign-On (SSO) and Sessions. The topics include resets of the load-balancer cookie, failover, session timeout values, and prevention of session hijacking.

Sun Java System Directory Server 6.0 as an LDAP Naming Service

Learn how to deploy a naming service for clients that run AIX 5.3, Red Hat Linux, or the Solaris OS (releases 8, 9, or 10).

Sun Java System Access Manager and Sun Java System Federation Manager FAQ

The first two sections, General and Administration Console, address interoperability, user interfaces, password resets, and other topics. More sections are forthcoming: authentication, single sign-on, Liberty Alliance and SAML.

Securing Applications With Identity Services, Part 1: Authentication

By configuring OpenSSO, Sun's open-source project for Sun Java System Access Manager, you can authenticate users with identity-service interfaces that support SOAP/WSDL and REST. This article describes the procedure through an example application built with the NetBeans IDE.

Introducing the OpenDS Project

OpenDS, an open-source project for a directory service that boasts ease of use and scalability, has made remarkable strides since its launch in 2005. Read about its goals, benefits, progress, and upcoming milestones.

Installing, Configuring, and Deploying Sun Java System Access Manager the Simple Way

This article describes the process, which takes only minutes to complete. Deployment works on most platforms on most containers that comply with Java Servlet 2.3. Have a try!

Sun and Microsoft Interoperate for Web Authentication, Part 3: Sun Java System Access Manager and Microsoft Outlook Web Access for Exchange Server 2003

Learn how to integrate Access Manager and OWA for single sign-on. Users can then authenticate with Access Manager and perform email tasks without logging in again. A big win in usability and time savings!

Sun Identity Manager (With Passion!) Free Online Course

Sun evangelist Sang Shin's free online course starts on September 17, 2007. The course contents are created based on the Sun Java System Identity Manager (IDM) version 7.1, providing the basis for administration and development activities. Each topic has a hands-on lab that contains NetBeans IDE projects ready to open and build.

A Tutorial on Applying Web-Service Security to EJB Applications

Through a stock–quote sample, this comprehensive tutorial shows you how to use Sun Java System Access Manager and the Java Application Platform SDK with Tools bundle to secure Web services that are based on Enterprise JavaBeans technology. Part 1 describes the basics, the installation and configuration procedures, and the security profiles supported by Access Manager. Part 2 describes the process flow and explains Exercises 1−3, in which you compile, build, and deploy the projects; test the Web−service client and provider; and configure them for message−level security. Part 3 steps you through Exercises 4−5, in which you configure a WSC and a WSP for identity−enabled Web−service security and configure a stand−alone WSC.

Sun and Microsoft Interoperate for Web Authentication, Part 2: Sun Java System Access Manager and SharePoint Portal Server 2003

This article shows you how to integrate SharePoint and Access Manager to achieve single sign-on. Subsequently, you can also administer through Access Manager the authorization policies of .NET applications that rely on Microsoft Internet Information Services (IIS).

Developing Secure Applications With Sun Java System Access Manager, Part 1: Basic Authorization

Through an example along with sample code and screen shots, this article explains how to achieve a fine-grained authorization model with access levels for enterprise Java applications. All the configurations are based on Access Manager's out-of-the-box capabilities.

Single Logout: A Demo

Learn how to implement single logout, which terminates user sessions with all the members in a Circle of Trust in the Security Assertion Markup Language (SAML). This article also updates you about Project Lightbulb.

OpenID at Sun

OpenID is a lightweight, decentralized authentication system that is increasingly part of today's web. As part of Sun's strategy to continue delivering market−leading identity management solutions to a wide range of customers, we're committed to exploring all relevant technologies. Today we're showcasing some of the ways in which Sun is supporting OpenID, with more to come in the months ahead. The open-source OpenID Provider, which implements a complete OpenID 1.1 identity provider, has been architected to integrate smoothly with both OpenSSO and OpenDS. You can download and use it today. We've launched a specialized Identity Provider for OpenID, one that guarantees that anyone using an OpenID from this service is a Sun employee. We're in discussions with partner web sites to extend special services to Sun employees through this service; it can of course also be used as a normal OpenID identity provider by all web sites that accept OpenID logins.

Hands-On Lab: Securing Identity Web Services (LAB-5410)

Learn how to configure authentication source and identity repositories with OpenSSO (Sun Java System Access Manager) deployed within the Java Application Platform SDK. This lab also demonstrates how to secure Web services with standard security mechanisms. (SDN registration (free) required.)

Sun Reassures OpenID Developers

Sun has issued a Non-Assertion Covenant (NAC), which promises that Sun will not enforce patents against developers of OpenID technology. This means that Sun will not impose licensing terms, conditions, or fees for the use of any patents held by Sun related to OpenID V1.1 or OpenID Simple Registration V1.0. The only condition is that developers refrain from asserting their own (or others') patents against any other OpenID implementation developer.

Achieving SSO With Sun Java System Access Manager and SAML

Standardized exchanges of authentication and authorization data by means of the Security Assertion Markup Language between an identity provider and a service provider form the basis of single sign-on. This article explains the concepts and the process with an example, in which Sun Java System Access Manager 7.1 is the identity provider and SAP NetWeaver Enterprise Portal 2004s is the service provider, complete with source code and graphics.

Securing Sites With CardSpace and OpenSSO: An Overview

Extending OpenSSO (Sun's open Web access management project based on Sun Java System Access Manager) with Windows CardSpace delivers a more secure authentication model than the traditional user name-password model. This article describes the benefits, basic architecture, and process flow of a lightweight implementation developed by ICSynergy International, an Elite Sun Partner that specializes in identity management and identity-enabled SOA solutions.

Securing Communications in Web Services: A Tutorial

Privacy protection is mandatory for Web services. Through an example of a stock-quote service, this tutorial describes how to secure Web-service communications with Sun Java System Access Manager, the NetBeans 5.5 IDE, and the Java Application Platform SDK with Tools bundle.

Switch on SAML for PHP With Project Lightbulb

Open-source Project Lightbulb brings federated identity to numerous platforms, thanks to a Lightbulb service provider, developed in PHP, and Security Assertion Markup Language 2.0. Here, you learn how to enable PHP applications on the Web, helped by the service provider, an identity provider, and SAML 2.0.