What's New  

December 15, 2008
Protecting Java EE Applications With OpenSSO Policy Agents, Part 2: Same-Domain SSO
How to configure OpenSSO so that certain resources on your secured application are publicly accessible with no authentication required? Read this article for the procedure. Also included is an overview of the types of single sign-on.

See Part 1 for how to secure Web applications with OpenSSO Policy Agents.

December 08, 2008
Federated Single Sign-On for Salesforce in OpenSSO
Learn how to implement federated SSO for Salesforce CRM software with an open-standards-based approach, featuring OpenSSO as the identity provider. That way, you preserve the confidentiality of user login credentials and eliminate the need for multiple logins.

December 01, 2008
Single Sign-On for Su garCRM Through a SAML-Based Integration of OpenSSO and simpleSAMLphp
With PHP-based SugarCRM as an example, this article shows you how to enforce SSO in a PHP environment. The process integrates OpenSSO, Sun's open-source Web access management project, with an application in the LAMP [Linux, Apache, MySQL, and PHP] or SAMP [Solaris and AMP] stack. Here, simpleSAMLphp acts as the front end for SugarCRM.

November 24, 2008
Protecting Java EE Applications With OpenSSO Policy Agents, Part 1: Basic Steps
Writing security code and configuring the security model for Web applications can be cumbersome. The open-source project OpenSSO offers many security-related capabilities for applications: authentication, authorization, single sign on, identity services, security for Web services. This article describes how to easily protect Web applications with the OpenSSO Policy Agents in just a few steps.

November 12, 2008
Federated Single Sign-On for Google Apps in OpenSSO
Federating single sign-on with OpenSSO is fast, straightforward, and intuitive. This article describes the process for highly popular Google Apps.

November 11, 2008
Sun OpenSSO Enterprise 8.0 Released
Sun OpenSSO Enterprise delivers integrated access management, federation, and secured Web services in an easy-to-deploy Java package. Based on Project OpenSSO, OpenSSO Enterprise offers a fully supported and indemnified open-source solution for internal and external single sign-on, protecting access both within and outside the enterprise. Download it for free!

October 21, 2008
Using Sun Java System Web Server With Sun Identity Manager and MySQL
Find out how to install Sun Identity Manager on top of a Web server instead of an application server with a MySQL database. This article also describes how to perform initial deployment tasks.

October 14, 2008
From the Trenches at Sun Identity, Part 8: Quality Assurance
In this interview, Indira Thangasamy, senior quality engineering manager for Sun OpenSSO Enterprise, offers insights on the behind-the-scenes testing harness and processes that ensure a high-quality product.

October 07, 2008
Ask the Experts Transcript: OpenSSO
Will OpenSSO support Active Directory to integrate with Windows authentication? Will it support all the databases like SQL 2005/2008 and Oracle 11g? Find the answers to these and a variety of other questions about OpenSSO in the Ask the Experts transcript.

September 26, 2008
Deploying OpenSSO on GlassFish Application Server
Go open source for identity management! Deployment of OpenSSO on GlassFish application server results in an ideal environment for developing secure Web applications. This article describes the basic deployment process, including the predeployment and configuration steps.

September 26, 2008
Ask the Experts About OpenSSO: September 29-October 3
Got a question about OpenSSO, Sun's open-source project for access management, identity federation, and Web services? Post it during the week of September 29 and get answers from key members of Sun's access and federation management team.

September 11, 2008
From the Trenches at Sun Identity, Part 7: Security for Web Services
What are Web services and why are the data they transmit highly insecure? How do you protect the data interactions? What role does OpenSSO play? Sidharth Mishra, technical product manager for identity management at Sun, answers those questions in this interview.

September 11, 2008
Join a Second Life Session on OpenSSO at 8:00 a.m. PT, Tuesday, September 30
Meet with Sun's Daniel Raskin and Jamie Nelson in a live chat on OpenSSO's solutions for internal access management, extranet authentication, federation, and security for web services. Register for a confirmation of the details.

August 26, 2008
Integrating Applications With OpenSSO
Learn the four ways in which to integrate web applications with OpenSSO: through the Policy Agent, a reverse proxy, the client SDK, and identity services. In addition, this article features a Ruby on Rails sample application and shows you how to secure its login process with identity services.

August 18, 2008
From the Trenches at Sun Identity, Part 6: Identity Services for Securing Web Applications
In this interview, Sun identity architect Aravindan Ranganathan explains why OpenSSO's identity services are an ideal architecture for protecting applications from unauthorized access. He also describes the related tasks, the benefits, and the plans for integrating identity services with the federation capability in OpenSSO.

August 18, 2008
Download NetBeans IDE 6.5 Beta
Efficiently create web, enterprise, desktop, and mobile applications with the language of your choice: Java, C/C++ , JavaScript, Ruby, Groovy, or PHP.

August 06, 2008
Setting Up OpenDS 1.0.0 as a Naming Service for the OpenSolaris OS, Part 2 of 2: Advanced Configurations
To complete the process, configure for UNIX user authentication and for Digest-MD5 or CRAM-MD5 authentication before setting up the clients. This article walks you through the procedures and describes how to optimize for performance and edit Java settings. Read Part 1.

August 06, 2008
Sun Announces OpenDS Standard Edition (SE) 1.0
Commercial support and indemnification are now available for OpenDS, Sun's open-source, LDAP d irectory server that's written in the Java language. Also read about the many ways in which you can participate in OpenDS.

July 30, 2008
Securing Applications With Identity Services, Part 4: Single Sign-On and Logout
Learn how to achieve SSO and logout by means of OpenSSO-supported REST operations. By way of demonstration, this article hosts a sample application, accompanied by the related setup procedures and code segments.

July 23, 2008
From the Trenches at Sun Identity, Part 5: Support for OpenSSO
Breaking news: Sun is offering full support and indemnification for its open Web access management and federation project. In this interview, senior product manager Nick Wooler describes the background, the support model, and the gains for developers.

July 16, 2008
Setting Up OpenDS 1.0.0 as a Naming Service for the OpenSolaris OS, Part 1 of 2: Basic Steps
Take advantage of the newly shipped OpenDS, an open-source, LDAP directory server written in the Java language. This series explains, step by step, the intuitive setup procedure for OpenDS on the OpenSolaris OS.

July 14, 2008
OpenDS 1.0.0, Open-Source LDAP Directory Server in Java Language, Ships
Free and open with many standard and experimental extensions, maximum interoperability with clients, rich APIs, a multimaster replication model, and other benefits. Take it for a spin!

July 14, 2008
Sun Net Talk: Sun Identity Manager 8.0
Watch this webcast to see how this latest release's new features address key identity management challenges.

July 08, 2008
Multimaster Deployment of Sun Java System Directory Server Enterprise Edition 6
Sun Java System Directory Server EE 6 allows unlimited master directory servers. Read about the benefits of deploying an exclusively multimaster topology instead of a master, consumer, and replication hub topology.

June 27, 2008
Sun Identity Manager 8.0 Released
The latest version of Identity Manager offers numerous product enhancements and new functionality, including data export, comprehensive attestation capabilities, and improved integration of business roles. Download it now.

June 17, 2008
Access Manager FAQ: Performance and Sizing, Policy, Session Failover and Deployment, and Agents
Besides helpful tips on performance optimization and configurations, these Q&As also offer best practices and resolutions for error scenarios.

June 05, 2008
Second Segment of Access Manager FAQ on SAML
Read more tips and guidelines: resolving errors, enabling basic authentication, mapping the SAML 2.0 Authentication Context, differentiating between the Post Profile and the Artifact Profile.

May 28, 2008
From the Trenches at Sun Identity , Part 4: Virtual Federation, a Pioneering Way for Exchanging Authentication Data
Sun identity architect Rajeev Angal describes the challenges enterprises face with federation and explains how virtual federation, a unique capability in the upcoming Sun Federated Access Manager, effectively resolves all the issues.

May 19, 2008
Resetting the admin Password in Sun Java System Directory Server
In a fix and need to reset the admin password for Sun Java System Directory Server? This tip tells you how.

May 09, 2008
Updated: Securing Applications With Identity Services, Part 1: Authentication
Learn how to configure OpenSSO so as to authenticate users with identity-service interfaces that support SOAP with WSDL and REST. This updated article reflects the latest UI and parameters for the REST operations.

May 07, 2008
An Overview and Demonstration of OpenSSO and Federation
At CommunityOne 2008, Sun's identity management experts describe the latest model of effecting single sign-on and the process of federating across enterprises with OpenSSO.

May 06, 2008
A Rundown on OpenDS
Ludovic Poitou, community lead for OpenDS; and Jim Yang, project lead for Penrose, a Java technology-based directory server, presented at CommunityOne on the topic, "Getting Started on OpenDS." This recap summarizes the goals, status, installation, and extensibility of OpenDS, also the infrastructure of Penrose, whose default provider is OpenDS.

April 30, 2008
Identity Management at CommunityOne
Come to CommunityOne on May 5 in San Francisco and attend an OpenSSO Workshop and a session on Getting Started With OpenDS. Registration is free.

April 16, 2008
Securing Applications With Identity Services, Part 3: User Attributes
Identity services are interfaces that support authentication, authorization, and other related services with SOAP or REST technology. This article steps you through the procedure for obtaining, through the attribute service, the attributes of users whose tokens are passed in service calls.

April 10, 2008
Fr om the Trenches at Sun Identity, Part 3: Federated Access Management Simplified
Senior product line manager Daniel Raskin discusses the background for mergi ng two of Sun's access and federation management products and the new capabilities that focus on simplicity, ease of use, efficiency, and convenience.

March 24, 2008
From the Trenches at Sun Identity, Part 2: OpenSSO, a Thriving Community
Sun federation architect Pat Patterson reflects on OpenSSO, Sun's open-source project for single sign-on, outlining its mission, adoption, challenges, future, and an unexpected boon to Sun. OpenSSO is a twin of Sun Java System Access Manager.

March 17, 2008
From the Trenches at Sun Identity, Part 1: Access Management for Web Applications
In this interview, Jamie Nelson, Sun's director of engineering for access and federation management, points out a major oversight in Web development, elaborates on the current state of single sign-on, and suggests the right tool and the right platform for securing application access.

March 12, 2008
Two New FAQ Segments for Sun Java System Access Manager
Here are Q&As on identity management and the service management SDK. The topics range from configurations to the Identity Repository to realms to attributes.

February 29, 2008
Federated Identity Through the Eyes of the Deployer
What identity-related challenges do application deployers face? What considerations are involved in setting up a single sign-on solution so that users can authenticate elsewhere before accessing your application? What are the popular federated identity protocols? What questions must you ponder before adopting a standardized solution? Find the answers, along with tips and guidelines, in this article.

February 15, 2008
Building and Running OpenDS With NetBeans IDE
In only a few steps, you can build, debug, and run OpenDS--the open-source project for Sun's next-generation directory services products--in the NetBeans IDE. This article walks you through the process with screen shots.

February 11, 2008
Perl Scripts Offer Quick, Accurate Installation and Configuration of Sun Java System Directory Server
Automation eradicates manual, duplicate tasks and achieves efficiency, accuracy, and uniformity. Through an example, this article shows you how to automate installation and configuration of Sun Java System Directory Server with Perl scripts.

February 04, 2008
Authenticate With Sun Java System Access Manager and ActivIdentity 4TRESS Authentication Server
A win-win integration story: You can now adopt 4TRESS one-time password (OTP) authentication schemes in Access Manager and thus secure applications with a wider range of OTP schemes in an Access Manager-protected environment.

January 28, 2008
Sun Technical Specialist on Identity and OpenSSO Extensions
Paul Bryan talks with Marina Sum about his background in identity development, the history and future of Sun Java System Access Manager, OpenID, the subproject OpenSSO Extensions, and the solutions for phishing.

January 23, 2008
A Five-Star Score for Sun Java System Identity Manager
Cheers to Identity Manager! SC Magazine has awarded its version 7.1 five stars in an overall rating with full marks in features, performance, documentation, and support.

January 03, 2008
Developing Secure Applications With Sun Java System Access Manager, Part 2: Advanced Authorization
As a sequel to Part 1, this article describes how to extend the authorization of Sun Java System Access Manager with a hierarchy-based resource model and interoperable Web services for .NET applications.