Technical Articles

 

Troubleshooting OpenSSO with Firefox Add-Ons: Part 2, Single Sign-On and Policy Protection

In Part 2 of this article, explore an OpenSSO deployment designed for simple single sign-on and policy protection.

Troubleshooting OpenSSO with Firefox Add-Ons: Part 1, Introduction

OpenSSO deployments can be complex and difficult to debug. In Part 1 of this article, learn how to set up Firefox add-ons to troubleshoot your OpenSSO deployments.

Enabling Virtual Federation With OpenSSO, Part 2: A Tutorial

Configure OpenSSO for virtual federation and for secure attributes exchange. Enjoy the benefits of a secure, loosely coupled, and centralized federation solution. Read on for details and an overview of the end-to-end virtual federation process.

Enabling Virtual Federation With OpenSSO, Part 1: Introduction

What challenges are businesses facing in identity federation? How does OpenSSO's virtual federation capability tackle them so that your identity and federation infrastructure is simple, secure, and standardized? Read this article for the answers.

Perspectives on Quality Assurance for OpenDS

OpenDS is Sun's open-source project for developing a next-generation directory service. In this article, QA lead Gary Williams elaborates on the project's testing aspect: opportunities, challenges, guidelines, practices, measurements.

Protecting Java EE Applications With OpenSSO Policy Agents, Part 2: Same-Domain SSO

How to configure OpenSSO so that certain resources on your secured application are publicly accessible with no authentication required? Read this article for the procedure. Also included is an overview of the types of single sign-on.

Federated Single Sign-On for Salesforce in OpenSSO

Learn how to implement federated SSO for Salesforce CRM software with an open-standards-based approach, featuring OpenSSO as the identity provider. That way, you preserve the confidentiality of user login credentials and eliminate the need for multiple logins.

Single Sign-On for SugarCRM Through a SAML-Based Integration of OpenSSO and simpleSAMLphp

With PHP-based SugarCRM as an example, this article shows you how to enforce SSO in a PHP environment. The process integrates OpenSSO, Sun's open-source Web access management project, with an application in the Linux, Apache, MySQL, and PHP (LAMP) or Solaris and AMP (SAMP) stack. Here, simpleSAMLphp acts as the front end for SugarCRM.

Protecting Java EE Applications With OpenSSO Policy Agents, Part 1: Basic Steps

Writing security code and configuring the security model for Web applications can be cumbersome. The open-source project OpenSSO offers many security-related capabilities for applications: authentication, authorization, single sign on, identity services, security for Web services. This article describes how to easily protect Web applications with the OpenSSO Policy Agents in just a few steps.

Federated Single Sign-On for Google Apps in OpenSSO

Federating single sign-on with OpenSSO is fast, straightforward, and intuitive. This article describes the process for highly popular Google Apps.

Federation Proof-of-Concept OpenSSO, WS-Federation and DataPower [PDF]

This document describes a proof of concept showing single sign-on between OpenSSO and Active Directory Federation Services (ADFS) via WS-Federation and between OpenSSO and the customer's WebSphere environment via IBM DataPower and SAML.

From the Trenches at Sun Identity, Part 8: Quality Assurance

In this interview, Indira Thangasamy, senior quality engineering manager for Sun OpenSSO Enterprise, offers insights on the behind-the-scenes testing harness and processes that ensure a high-quality product.

Sun Secure Global Desktop and OpenSSO Integration [PDF]

This document describes how Sun Secure Global Desktop can be integrated in a Web access-management infrastructure based on OpenSSO, enabling single sign-on and policy enforcement.

Deploying OpenSSO on GlassFish Application Server

Go open source for identity management! Deployment of OpenSSO on GlassFish application server results in an ideal environment for developing secure Web applications. This article describes the basic deployment process.

From the Trenches at Sun Identity, Part 7: Security for Web Services

What are Web services and why are the data they transmit highly insecure? How do you protect the data interactions? What role does OpenSSO play? Sidharth Mishra, technical product manager for identity management at Sun, answers those questions in this interview.

Integrating Applications With OpenSSO

Learn the four ways in which to integrate Web applications with OpenSSO: through the Policy Agent, a reverse proxy, the client SDK, and identity services. In addition, this article features a Ruby on Rails sample application and shows you how to secure its login process with identity services.

From the Trenches at Sun Identity, Part 6: Identity Services for Securing Web Applications

In this interview, Sun identity architect Aravindan Ranganathan explains why OpenSSO's identity services are an ideal architecture for protecting applications from unauthorized access. He also describes the related tasks, the benefits, and the plans for integrating identity services with the federation capability in OpenSSO.

Securing Applications With Identity Services, Part 4: Single Sign-On and Logout

Learn how to achieve SSO and logout by means of OpenSSO-supported REST operations. By way of demonstration, this article hosts a sample application, accompanied by the related setup procedures and code segments.

From the Trenches at Sun Identity, Part 5: Support for OpenSSO

Sun is offering full support and indemnification for its open Web access management and federation project. In this interview, senior product manager Nick Wooler describes the background, the support model, and the gains for developers.

From the Trenches at Sun Identity, Part 4: Virtual Federation, a Pioneering Way for Exchanging Authentication Data

Sun identity architect Rajeev Angal describes the challenges enterprises face with federation and explains how virtual federation, a unique capability in the upcoming Sun Federated Access Manager, effectively resolves all the issues.

Securing Applications With Identity Services, Part 3: User Attributes

Identity services are interfaces that support authentication, authorization, and other related services with SOAP or REST technology. This article steps you through the procedure for obtaining, through the attribute service, the attributes of users whose tokens are passed in service calls.

From the Trenches at Sun Identity, Part 3: Federated Access Management Simplified

Senior product line manager Daniel Raskin discusses the background for merging two of Sun's access and federation management products and the new capabilities that focus on simplicity, ease of use, efficiency, and convenience.

From the Trenches at Sun Identity, Part 2: OpenSSO, a Thriving Community

In this interview, Pat Patterson expounds on OpenSSO's mission, adoption model, and challenges. He also describes a significant gain to Sun and his aspiration for OpenSSO's future.

From the Trenches at Sun Identity, Part 1: Access Management for Web Applications

In this interview, Jamie Nelson, Sun's director of engineering for access and federation management, points out a major oversight in Web development, elaborates on the current state of single sign-on, and suggests the right tool and the right platform for securing application access.

Federated Identity Through the Eyes of the Deployer

What identity-related challenges do application deployers face? What considerations are involved in setting up a single sign-on solution so that users can authenticate elsewhere before accessing your application? What are the popular federated identity protocols? What questions must you ponder before adopting a standardized solution? Find the answers, along with tips and guidelines, in this article.

Achieving OTP-based Authentication by Integrating Sun Java System Access Manager and ActivIdentity 4TRESS Authentication Server

Great news for identity developers! An integration of Sun Java System Access Manager (henceforth, Access Manager) and ActivIdentity 4TRESS Authentication Server (henceforth, 4TRESS) is now in place. Newly available as an OpenSSO extension is an Access Manager authentication module that adopts the 4TRESS-supported one-time password (OTP) schemes, including Europay, MasterCard, and Visa (EMV or Chip and PIN). That Access Manager module is known as the 4TRESS OTP authentication module.

Sun Technical Specialist on Identity and OpenSSO Extensions

Interview with Paul Bryan, a Sun technical specialist in Vancouver, B.C., about his background in identity-related development. We also discussed OpenSSO Extensions, including support for OpenID. Notably, Paul aims to create an authentication system that will alleviate security fraud and theft, such as phishing.

Developing Secure Applications With SJS Access Manager

In Part 2, you learn how to satisfy some of the most common yet complex enterprise deployment and quality requirements, again with Access Manager and through the EB Health example.

Securing Applications With Identity Services, Part 2: Authorization

In Part 2, again with IdSvcsClient, an example client application built with the NetBeans IDE, you learn how to further configure OpenSSO so as to allow authenticated users to perform tasks for which they have been authorized.

Securing Applications With Identity Services, Part 1: Authentication

Through an example of a client application built with the NetBeans IDE, this article, Part 1 of a series, shows you how to configure OpenSSO so as to authenticate - by means of identity services - users who access protected resources.

Installing, Configuring, and Deploying Sun Java System Access Manager the Simple Way

This article describes a simple and efficient way to install, configure, and deploy Access Manager on Sun Java System Application Server, which is also an open-source project called GlassFish. On average, the entire process takes less than 10 minutes to complete and so is especially handy for prototypes.

Sun and Microsoft Interoperate for Web Authentication, Part 3

Sun Java System Access Manager and SharePoint Portal Server 2003 - article from Sun Developer Network.

Sun and Microsoft Interoperate for Web Authentication, Part 2

Sun Java System Access Manager and SharePoint Portal Server 2003 - article from Sun Developer Network.

Achieving SSO With Sun Java System Access Manager and SAML

By Vasanth Bhat and Marina Sum. This article explains the basic SAML concepts and describes the steps for achieving SSO with Access Manager 7.1 and the SAML 1.x Web Browser Artifact Profile.

Securing Site Access With CardSpace and OpenSSO: An Overview

By Martin Gee, ICSynergy International - This article describes the benefits, basic architecture, and process flow of the CardSpace-OpenSSO authentication module.

Sun and Microsoft Interoperate for Web Authentication, Part 1

by Pat Patterson and Marina Sum - This article, the first in a three-part series, elaborates on how to integrate Active Server Pages (ASP) and ASP.NET applications into an SSO environment with Access Manager and the Policy Agent Microsoft Internet IIS. The article:

  • Discusses interoperability between Access Manager and Microsoft technologies
  • Examines the interplay among Access Manager, the Policy Agent, IIS, and .NET applications and describes how to integrate Access Manager into a .NET environment and pre-.NET ASP applications
  • Explains how to configure IIS for a deeper integration so that the IIS thread can "impersonate" users to gain access to resources according to Windows' Access Control Lists (ACLs)

Developing Secure Applications With Sun Java System Access Manager, Part 1: Basic Authorization

By Robert Skoczylas and Marina Sum, June 25, 2007. This article, Part 1 of a series, describes how to use Sun Java System Access Manager to fulfill the authorization requirements for a fictitious health-care insurance company, EB Health.

Single Logout: A Demo

This article is a follow up to how Project Lightbulb has grown, what constitutes a Circle of Trust, and how SLO works.

Installing, Managing, and Using Sun Java System Access Manager and Sun Java System Identity Manager on the Solaris 10 OS

Installing, Managing, and Using Sun Java System Access Manager and Sun Java System Identity Manager on the Solaris 10 OS.

Building Identity-Enabled Web Services

Sun's identity experts answer that question of how to ensure secure access to Web services across enterprises and preserve privacy of sensitive data , along with sample code and suggestions for products and technologies.

Federated Identity: Single Sign-On Among Enterprises

Federated Identity: Single Sign-On Among Enterprises

A Tutorial on Applying Web-Service Security to EJB Applications, Part 1 of 3: Overview

A Tutorial on Applying Web-Service Security to EJB Applications

Switch on SAML for PHP with Project Lightbulb

SAML for PHP with Project Lightbulb

 

Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.

Sign up or Log in to add a comment or watch this page.


The individuals who post here are part of the extended Sun Microsystems community and they might not be employed or in any way formally affiliated with Sun Microsystems. The opinions expressed here are their own, are not necessarily reviewed in advance by anyone but the individual authors, and neither Sun nor any other party necessarily agrees with them.

Copyright 1994-2009 Sun Microsystems, Inc.
Powered by Atlassian Confluence
Sun Guidelines on Public Discourse Privacy Policy Terms of Use Trademarks Site Map Employment Investor Relations Contact