Superpatterns

Pat Patterson on Identity Management, Federation and Single Malt Scotch
         

accessmanager adoption authentication bloggers community extensions federation google identity libertyalliance lightbulb links openid opensource opensso php saml sdn security sso sun webservices
 
OpenSSO+Spring - an Open Source Community in Action
[ ]

On Friday morning, Jim Gellman of the Institute for Systems Biology asked a question on the OpenSSO Users mailing list about OpenSSO/Spring Security (formerly known as Acegi) integration:

We'd like to use opensso with an app that's using Spring Security currently, but we don't have the resources at the moment to develop a module to do this.

Instead we're hoping we can use Spring Security's container adapter for tomcat along with the OpenSSO agent. Does anyone know for sure whether this is a reasonable approach?

Just a few minutes later, Robert Dale of CALGB replied:

I actually have code based on acegi-security 1.0.3 that provides an AuthenticationProvider, LogoutHandler, AuthenticationProcessingFilter, and AuthenticationProcessingFilterEntryPoint. I would be more than happy to donate to OpenSSO extensions if they want it.

How can you refuse an offer like that? Actually, it turns out that Robert had also done some work with Seraph (Atlassian's security framework, used by Jira and Confluence). So, this morning I created two new 'Authentication Provider' OpenSSO Extensions - one for Spring and one for Seraph - and Robert checked in his code. If you've been scratching your head, wondering how to integrate OpenSSO with Spring or Seraph, go check 'em out!

@ 06:04 AM PDT Comments [4]
 
 
 
Trackback URL: http://blogs.sun.com/superpat/entry/opensso_spring_an_open_source
Comments:

Actually, I'm of CALGB - http://www.calgb.org
Thanks.

Posted by Robert Dale on September 16, 2008 at 12:14 PM PDT #

Fixed - thanks for the correction, Robert.

Posted by Pat Patterson on September 16, 2008 at 12:17 PM PDT #

Hi,
I'm very keen on using OpenSSO with Acegui / Spring Security (have applications secured with both versions). I followed the link to: https://opensso.dev.java.net/public/extensions/#authnproviders

However some things seems to be missing, I could get the source code (not via cvs, always timeout when connecting to the server), but not some files like:
AMConfig.properties
applicationContext-acegi-security.xml
pom.xml

Is there a way to get those files?
Cheers,

Javier

Posted by Javier Piscoya on February 19, 2009 at 01:35 AM PST #

Hi Javier,

I didn't write the Acegi/Spring integration, but if you email the users@opensso.dev.java.net mailing list you'll be able to reach people who are working with it. To subscribe:

1. Go to https://www.dev.java.net/servlets/Join and register for a java.net account.
2. Go to https://opensso.dev.java.net/servlets/ProjectMembershipRequest and request 'Observer' role on OpenSSO.
3. Go to https://opensso.dev.java.net/servlets/ProjectMailingListList and subscribe to 'users@opensso.dev.java.net'.

Cheers,

Pat

Posted by Pat Patterson on February 19, 2009 at 10:38 PM PST #

Post a Comment:

Name:
E-Mail:
URL:

Your Comment:

HTML Syntax: NOT allowed
 

    OpenSSO - Get It Now

    Identity Management Buzz Podcast
    Stay connected to news, show notes and leave your feedback.
    Listening To
    Listen to Radio Pat
    www.flickr.com
    superpat7's photos More of superpat7's photos
    Technorati
Valid XHTML or CSS?
[This is a Roller site]
Original theme by Rowell Sotto. Heavily modified by Pat Patterson.