Wednesday Aug 27, 2008

Integrating Applications With OpenSSO

Learn the four ways in which to integrate web applications with OpenSSO: through the Policy Agent, a reverse proxy, the client SDK, and identity services. In addition, this article features a Ruby on Rails sample application and shows you how to secure its login process with identity services.

Sun in Second Life

I'm excited to announce I'll be working more with the developer community in Second Life for Sun.

In the past, chats have been given to developers on various topics of Java programming, especially to beginners. These are always fun events because the developer community in Second Life is so enthusiastic about learning the Java platform, and they are so appreciative of the time Sun employees spend talking to them in SL.

This brings me to why environments like SL so valuable to our company and the community at large: communication. Most of interaction with developers is in the form of email: responses  directly from articles and blogs, and comments in the feedback form on the site. But the atmosphere of a virtual world is quite different, and  encourages dialog in a wonderful way.

While it's true we are not person to person in the material sense, we are avatar to avatar, which brings in new dynamics. Some might argue that this is so artificial as to be considered ridiculous, but I have to argue that it brings comfortable anonymity to those who might otherwise be shy, uncomfortable speaking in large groups, sneaking in Java technology on the sly outside of their current jobs, or just otherwise not social. In addition, those who are more social and comfortable are not held back in anyway. Lastly, virtual worlds are just darned convenient and bring people together who otherwise would never meet because of geographical distance, time constraints, etc.

Sun's space in Second Life provides us the opportunity to share our technologies and programs with a wider audience of developers, but even more importantly it allows us to talk to you directly, or at least avatar to avatar, to get your feedback and thoughts on what we're doing, how to use our technologies, and how we can help you grow your business and careers. It is exciting and enlightening to talk to developers in this way and get your feedback, hear your questions and concerns, and have the opportunity to respond in kind. These interactions in Second Life are two-way with synergy. I believe we all benefit from the interaction.

I'll look forward to seeing your avatars inworld!

Monday Aug 25, 2008

California men claim they found IdentiCat

Whenever someone reports sighting the hairy beast of yore (details always fuzzy) or capturing the hirsute humanoid on film (images always grainy), it scares up a dubious debate of international proportions. Friday was just the latest episode in the IdentiCat show, as unreal as it may be.

Two men who claim to have stumbled across an IdentiCat in the woods of Sun Island in Second Life indignantly stood by their story at a news conference in Palo Alto during which they offered a picture as evidence and acknowledged they wouldn't mind making a few bucks from the "find."


"Everyone who has talked down to us is going to eat their words," predicted Jamie Nelson, Director of Access Management and Federation at Sun Microsystems.

Nelson and Daniel Raskin, a Product Line Manager at Sun, announced the discovery in early August to close friends and co-workers. Although they did not consider themselves devoted IdentiCat trackers before then, they have since started offering weekend search expeditions in Sun Island for L$499. The specimen they took a picture of, the men say, was one of several Cat-like creatures they spotted cavorting in the woods. IdentiCats, thought to be fokelore until today, are famous for their innovative thoughts on identity management and gifted abilities of identity prescience.

As they faced a skeptical audience of several hundred journalists and IdentiCat fans that included one curiosity seeker in a Chewbacca suit, Nelson and Raskin were joined Friday by Pat Patterson, head of a group called Searching for IdentiCat. Other IdentiCat hunters call Patterson a cheap huckster looking for media attention.

Nelson and Raskin plan to release a video of the IdentiCat in the next few weeks and have announced that they will be hosting a coming out party and presentation by the mysterious IdentiCat in late September around access management, federation and secure web services. Stay tuned for more information.

Customers & Sun Fans!

We need your votes for the 2008 SOA World Readers Choice Awards! Sun has many products nominated included OpenSSO, Java CAPS and Glassfish. Voting takes 5 minutes and we'd really appreciate your support. Also, please forward this along to friends and other Sun supporters

Happy voting!
Vote Now! 


Update IDM Suite & Directory Server EE Datasheets

The Identity Management Suite Datasheet has been updated and now includes Role manager.
Click here! 

The DSEE Datasheet has also been updtaed to include updates for the 6.3 release!
Check it out now!

Friday Aug 22, 2008

From the Trenches at Sun Identity, Part 6: Identity Services for Securing Web Applications

In this interview, Sun identity architect Aravindan Ranganathan explains
why OpenSSO's identity services are an ideal architecture for protecting
applications from unauthorized access.  He also describes the related
tasks, the benefits, and the plans for integrating identity services
with the federation capability in OpenSSO.

Thursday Aug 21, 2008

OpenSSO Early Access Free Training

Deploying OpenSSO servers in a simple environment is trivially easy. But throw secure sockets layer (SSL), load balancers, multiple servers, session failover, and Policy Agents to the mix, and deployment becomes a little more complex. 

The OpenSSO Deployment course - a series of five downloadable, self-paced labs - takes you through a complex OpenSSO deployment. You deploy two Apache Tomcat servers, SSL-enable them, install a software load balancer, install OpenSSO into the environment, and configure OpenSSO for session failover. Then you install an example web server and an example application server, and install Policy Agent sofware to see how OpenSSO protects web sites and Java 2 Platform, Enterprise Edition (J2EE) applications.

This course uses OpenSSO Build 4.5, which provides identical functionality to OpenSSO Express Build 5. Other deployment components include Apache Tomcat version 6.0.14, Sun Java System Web Server version 7.0, and Glassfish application server version 2.

Get the Training

First, sign up for an account at My Sun if you do not already have one. (Sun employees can use their Sun e-mail address and LDAP password to log in.) Then access the course from Sun Learning's lab portal.

Get Help While Taking the Training

Since this training is available at no cost to you, the Ask the Expert feature of Sun Learning's lab portal is inactive for this OpenSSO Deployment course. So use the OpenSSO community to get help instead. E-mail the mailing list, post to the forum, or use the IIRC channel.

Wednesday Aug 20, 2008

Sun announced OpenSSO Express on July 23, 2008 at OSCON

At OSCON on July 23, Sun announced it's new release of OpenSSO Express. This is the industry's first enterprise support for open source identity management and web single sign-on software. OpenSSO Express is a comprehensive, enterprise-class support and indemnification for OpenSSO, the open source code-base from which Sun Access Manager is derived. Sun is making its Sun Access Manager offering even more attractive to enterprises by extending support to also include OpenSSO Express, early access versions of the next Access Manager release that have been fully tested and certified by the OpenSSO community.

Read the feature story
Read the  press release

Tuesday Aug 12, 2008

Setting Up OpenDS 1.0.0 as a Naming Service for the OpenSolaris OS, Part 1 of 2: Basic Steps

OpenDS, an open-source, Lightweight Directory Access Protocol (LDAP) directory-server project (henceforth, OpenDS), is written entirely in the Java programming language. The project, which just shipped its release 1.0.0, is gaining momentum with an ever-growing community of committers, contributors, and users.

This article, Part 1 of a two-part series, describes how to install and configure OpenDS as a naming service for UNIX clients that run the OpenSolaris Operating System, Sun's open-source operating system. The procedures in this series also apply to the Solaris 10 OS, which is free for download.

Part 2 steps you through the advanced configurations: setting up the directory service for UNIX user authentication, configuring for Digest-MD5 or CRAM-MD5 authentication, configuring clients, and so forth.

Monday Aug 11, 2008

OpenSSO Project wants to hear from you

The OpenSSO Project is soliciting feedback on their Early Access Build -- OpenSSO Express Build 5. With the release of this build, community members now have the opportunity to participate in the Early Access (EA) program for Sun's next commercial offering. Review the Early Access documentation and hammer away at Express Build 5! Send your EA feedback to opensso.eafeedback@dev.java.net so we can make the product perfect. Thanks in advance!

Monday Aug 04, 2008

Securing Applications With Identity Services, Part 4: Single Sign-On and Logout

The Identity Services section in Part 1 of this series lists the Representational State Transfer (REST) operations that are supported by OpenSSO, Sun's open Web access management project. OpenSSO is based on the code base of Sun Java System Access Manager, a core identity-infrastructure software product. Here in Part 4, you're shown how to achieve single sign-on (SSO) and logout with REST. Even though the procedures in this part start with authentication as a key part of the process, the emphasis is on SSO and logout.

Note: In typical deployments, authentication is performed by a centralized server that can be distributed across multiple machines. All applications would then rely on that server for authentication and log in users with SSO. Another advantage offered by a centralized server is that it isolates the applications from authentication mechanisms, which range from the simple user-name/password credential scheme to complex approaches, such as multifactor authentication and federation.

Before proceeding, do read the first three parts of this series for the background on identity services and other related details:

As in Parts 1 through 3, we assume that you are familiar with the NetBeans IDE and that you have installed the latest build of OpenSSO. Afterwards, configure OpenSSO on the application server in which you will deploy the application. Feel free to deploy on another application server on another machine.

Coming Attractions
Subsequent parts of this series will show you how to audit, create, and update identity services. Stay tuned!