AAAA Identity Services in OpenSSO
Saturday Nov 10, 2007
There have been great strides in the OpenSSO community and one of the areas I am particularly proud of is the addition of identity services. Applications that authenticate end users using identity services can securely pass their attributes to OpenSSO without the need of an agent or labor-intensive kit. Identity Services can be invoked using REST or WSDL interfaces in the IDE of your choice. This means no agent is required to protect a resource. The identity services in OpenSSO (and available in our Spring release of Federated Access Manager 8.0) include:
* Authentication — Verification of user credentials
* Authorization — Permission for authenticated users to access secured resources
* Attributes — Collection of the profiles of authenticated users
* Audit Log — Ability to audit and record operations
Below is an example of the authentication identity service being invoked using Netbeans. This service is IDE agnostic and can also be used in Eclipse and Visual Studio.
If you're interested in exploring this functionality download OpenSSO and begin playing today. Also, Aravindan Ranganathan, one of our talented software architects at Sun, wrote a nice technical article titled Securing Applications With Identity Services, Part 1: Authentication. He will be publishing three more technical articles on the remaining services shortly - Authorization, Attributes, and Audit Log.
|
|
|
|
Tags: access alliance blogwatch federation identity liberty management microsystems opensso saml services software sso sun ws-federation
I don't understand
Has AAAA to do something with IPv6 in OpenSSO or a...
AAAA = AuthN, AuthZ, Atributes and Audit
Chirles, Basic jist is we have a SSO solution that...