December 20, 2007
New Section for Sun Java System Access Manager and Sun Java System Federation Manager FAQ: Liberty Alliance and Security Assertion Markup Language Read about the support for SAML, Liberty Alliance-based and other federation standards, the identity-based services in Access Manager, the utilities for creating and maintaining federated connections, the components in Federation Manager, and many other pertinent topics.

December 20, 2007
Gartner Places Sun Java System Access Manager in Leaders Quadrant A significant milestone!

November 27, 2007
Securing Applications With Identity Services, Part 2: Authorization Learn how to configure OpenSSO with identity services so as to allow users to perform tasks for which they have been authorized. Identity services are interfaces that support authentication, authorization, and other related services with SOAP or REST technology.

October 31, 2007
Sun Java System Access Manager and Sun Java System Federation Manager FAQ Read these developer-centric Q&As on numerous technical topics. The sections are being published in installments:

• General and Administration Console (October 24, 2007)
• Authentication and Single Sign-On (SSO) and Sessions (October 31, 2007)

October 31, 2007
Sun Java System Directory Server 6.0 as an LDAP Naming Service Learn how to deploy a naming service for clients that run AIX 5.3, Red Hat Linux, or the Solaris OS (releases 8, 9, or 10).

October 11, 2007
Securing Applications With Identity Services, Part 1: Authentication By configuring OpenSSO, Sun's open-source project for Sun Java System Access Manager, you can authenticate users with identity-service interfaces that support SOAP/WSDL and REST. This article describes the procedure through an example application built with the NetBeans IDE.

September 27, 2007
Introducing the OpenDS Project OpenDS, an open-source project for a directory service that boasts ease of use and scalability, has made remarkable strides since its launch in 2005. Read about its goals, benefits, progress, and upcoming milestones.

September 25, 2007
Installing, Configuring, and Deploying Sun Java System Access Manager the Simple Way This article describes the process, which takes only minutes to complete. Deployment works on most platforms on most containers that comply with Java Servlet 2.3. Have a try!

September 5, 2007
Sun and Microsoft Interoperate for Web Authentication, Part 3: Sun Java System Access Manager and Microsoft Outlook Web Access for Exchange Server 2003 Learn how to integrate Access Manager and OWA for single sign-on. Users can then authenticate with Access Manager and perform email tasks without logging in again. A big win in usability and time savings!

August 29, 2007
Sun Identity Manager (With Passion!) Free Online Course Sun evangelist Sang Shin's free online course starts on September 17, 2007. The course contents are created based on the Sun Java System Identity Manager (IDM) version 7.1, providing the basis for administration and development activities. Each topic has a hands-on lab that contains NetBeans IDE projects ready to open and build.

August 14, 2007
A Tutorial on Applying Web-Service Security to EJB Applications Through a stock-quote sample, this comprehensive tutorial shows you how to use Sun Java System Access Manager and the Java Application Platform SDK with Tools bundle to secure Web services that are based on Enterprise JavaBeans technology. Part 1 describes the basics, the installation and configuration procedures, and the security profiles supported by Access Manager. Part 2 describes the process flow and explains Exercises 1-3, in which you compile, build, and deploy the projects; test the Web-service client and provider; and configure them for message-level security. Part 3 steps you through Exercises 4-5, in which you configure a WSC and a WSP for identity-enabled Web-service security and configure a stand-alone WSC.

July 25, 2007
Sun and Microsoft Interoperate for Web Authentication, Part 2: Sun Java System Access Manager and SharePoint Portal Server 2003 This article shows you how to integrate SharePoint and Access Manager to achieve single sign-on. Subsequently, you can also administer through Access Manager the authorization policies of .NET applications that rely on Microsoft Internet Information Services (IIS).

Developing Secure Applications With Sun Java System Access Manager, Part 1: Basic Authorization Through an example along with sample code and screen shots, this article explains how to achieve a fine-grained authorization model with access levels for enterprise Java applications. All the configurations are based on Access Manager's out-of-the-box capabilities.

June 19, 2007
Single Logout: A Demo Learn how to implement single logout, which terminates user sessions with all the members in a Circle of Trust in the Security Assertion Markup Language (SAML). This article also updates you about Project Lightbulb.

June 11, 2007
OpenID at Sun OpenID is a lightweight, decentralized authentication system that is increasingly part of today's web. As part of Sun's strategy to continue delivering market-leading identity management solutions to a wide range of customers, we're committed to exploring all relevant technologies. Today we're showcasing some of the ways in which Sun is supporting OpenID, with more to come in the months ahead. The open-source OpenID Provider, which implements a complete OpenID 1.1 identity provider, has been architected to integrate smoothly with both OpenSSO and OpenDS. You can download and use it today. We've launched a specialized Identity Provider for OpenID, one that guarantees that anyone using an OpenID from this service is a Sun employee. We're in discussions with partner web sites to extend special services to Sun employees through this service; it can of course also be used as a normal OpenID identity provider by all web sites that accept OpenID logins.

June 11, 2007
Hands-On Lab: Securing Identity Web Services (LAB-5410) Learn how to configure authentication source and identity repositories with OpenSSO (Sun Java System Access Manager) deployed within the Java Application Platform SDK. This lab also demonstrates how to secure Web services with standard security mechanisms. (SDN registration (free) required.)

May 21, 2007
Sun Reassures OpenID Developers Sun has issued a Non-Assertion Covenant (NAC), which promises that Sun will not enforce patents against developers of OpenID technology. This means that Sun will not impose licensing terms, conditions, or fees for the use of any patents held by Sun related to OpenID V1.1 or OpenID Simple Registration V1.0. The only condition is that developers refrain from asserting their own (or others') patents against any other OpenID implementation developer.
» Read the covenant and an FAQ

April 24, 2007
Achieving SSO With Sun Java System Access Manager and SAML Standardized exchanges of authentication and authorization data by means of the Security Assertion Markup Language between an identity provider and a service provider form the basis of single sign-on. This article explains the concepts and the process with an example, in which Sun Java System Access Manager 7.1 is the identity provider and SAP NetWeaver Enterprise Portal 2004s is the service provider, complete with source code and graphics.

April 17, 2007
Securing Sites With CardSpace and OpenSSO: An Overview Extending OpenSSO (Sun's open Web access management project based on Sun Java System Access Manager) with Windows CardSpace delivers a more secure authentication model than the traditional user name-password model. This article describes the benefits, basic architecture, and process flow of a lightweight implementation developed by ICSynergy International, an Elite Sun Partner that specializes in identity management and identity-enabled SOA solutions.

February 26, 2007
Securing Communications in Web Services: A Tutorial Privacy protection is mandatory for Web services. Through an example of a stock-quote service, this tutorial describes how to secure Web-service communications with Sun Java System Access Manager, the NetBeans 5.5 IDE, and the Java Application Platform SDK with Tools bundle.

February 5, 2007
Switch on SAML for PHP With Project Lightbulb Open-source Project Lightbulb brings federated identity to numerous platforms, thanks to a Lightbulb service provider, developed in PHP, and Security Assertion Markup Language 2.0. Here, you learn how to enable PHP applications on the Web, helped by the service provider, an identity provider, and SAML 2.0.