SUN's Identity Management info Identity Fever

I'm at the Web Space Server bootcamp doing a deep-dive into Liferay's web2.0 core that was incorporated into the new Sun Space Server.
Sun Glassfish Space Server v10.0 is build on top of LifeRay Portal v5.2.

One of the nice add-ons (Xcellerators) Sun Microsystems provides today in the Space Server umbrella are the OpenOffice add-on and the OpenSSO add-on.
Without this add-on, Space Server can already connect to OpenSSO through the REST-based interface provided through the settings console.
This however only allows to authenticate through OpenSSO, and to inherit the basic user attributes through OpenSSO.

It does not allow you to connect to Access Manager 7.x (does not support REST), and it cannot map community names to LDAP groups/roles/filtered roles, nor can it map the realm users to Space Server organisations.
If you need any of these functionalities, you will be very happy with the OpenSSO add-on (that could also be considered the AM add-on).


If you have a supported release of Space Server, this add-on will be automatically available to you through the updatetool - along with other Xcellerators.
Instructions on how to install the add-on can be found here : http://wikis.sun.com/display/websynergy/OpenSSO+add-on .

As you probably know, Project Websynergy is building a next generation enterprise portal platform.
This portal platform will use the LifeRay portal as a base portal engine, and add additional functionality in the form of accelerators.

Liferay 5.2 just released, with a wealth of new functionality. As a result, this added functionality will also become available in WebSynergy - and in the first commercial and supported release of this platform.



New features : http://www.liferay.com/web/jferrer/blog/-/blogs/2096366

Presentation on websynergy :

https://slx.sun.com/1179271904

This week, I attended the introductory bootcamp on Sun's newest portal initiative : Portal Websynergy.

It dealth with the evolutionary process of the joined partnership between Liferay and Sun, in particular the way Sun is injecting Sun Java System Portal Server capabilities into the current Liferay Portal, an open-sourced merger known as a separate portal product currently called "Project WebSynergy".

See: https://portal.dev.java.net/ and http://blogs.sun.com/portal/

What was interesting to see is that the new WebSynergy portal is no longer tightly connected to the Sun Java System Access Manager (or Federated Access Manager as known starting with released 8.0), but now is connected with OpenSSO/FAM 8.0 for pure authentication and identity attribute delivery purposes only.

The connection with OpenSSO is configured via the admin widgets in WebSynergy :
You specify 4 parameters : Login URL (towards OpenSSO incl.goto parameter), LogOut URL, Service URL (using the new OpenSSO REST  identity webservice to obtain identity information), and the CookieName.
This means it does not need the OpenSSO Api nor does it need a Policy Agent installed.

Info on the OpenSSO REST webservice:
http://developers.sun.com/identity/reference/techart/id-svcs.html

WebSynergy also allows local authentication via internal user repositories (filesystem, RDBMS, ...) , onboard LDAP synchronisation with that local store etc.

Also keep in mind that, even though WebSynergy is a perfect fit for Developer/Web2.0 oriented start-ups (and adds additional functionality on top of the classic LifeRay Portal), the enterprise features as currently known in Sun Java System Portal Server 7.2 will be added in a high pace to this new portal platform.
The same is true for it's authorisation/authentication capabilities and Identity Based Content Delivery functionality.

I'm looking forward to see how Identity Manager could be coupled with this environment, allowing it to provision profile data into the local WebSynergy portal, whilst provisioning an account into the LDAP/OpenSSO repository for authentication