Superpatterns

OpenSSO Tab Sweep - Dec 12 2008
[ .net aca atlanta awsome biometric fedlet glassfish markmail opensso pki salesforce saml sdn sharepoint telenet ]

It's been a while since the last tab sweep - lots of news since then, such as the OpenSSO Enterprise 8.0 release, that's kept me busy both here on the blog and 'in real life' (if there is such a thing any more!). Anyway, here are some of the titbits I've been saving for a tab sweep blog post:

• I posted another OpenSSO adoption story to the Stories blog this morning: ACA IT-Solutions deploys OpenSSO at Telenet for fine-grained access control. You might remember I blogged about Telenet a little while ago, well, when we started covering OpenSSO on the Stories blog, Serge Craeghs of ACA IT-Solutions kindly completed the questionnaire for the Telenet deployment, with all sorts of juicy details - read all about it.
• Another nifty feature of MarkMail - project-based homepages. Just go to http://opensso.markmail.org/ and you can search and browse just the OpenSSO mailing lists. Very cool!
• Bert van Beeck writes about using SAML 1.x or SAML 2.0 to authenticate SharePoint users, with OpenSSO acting as a bridge between the Belgian Federal Authentication Service - FAS (a SAML 1.1 identity provider) and Microsoft SharePoint (which can speak WS-Federation, but not plain SAML 1.1).
• On The Open Road, David Goldsmith explains how to work around issues in GlassFish V3 Prelude's cookie handling to allow OpenSSO to work correctly, with a nod to Dennis' diagnosis of the problem.
• Although the Fedlet has been available for Java EE platforms for some time now, it's always been our intention to support .Net also, so it's great to see Rajeev Angal putting together a .Net Fedlet prototype. Give it a try and let Rajeev know how it goes.
• Rajeev strikes again, alongside Marina Sum, with a Sun Developer Network article on Federated Single Sign-On for Salesforce in OpenSSO. It's amazing how easy these integrations are now that SAML has become so widespread. There might just be something to these 'standards' we keep hearing about
• Over at Core Security Patterns, Ramesh Nagappan tantalizes us with a glimpse of a solution composed of Match-to-SmartCard PKI and Biometric authentication - starring OpenSSO in "multi-factor authentication based Web SSO that uses on-card credentials (PIN + PKI + Biometrics) using PIV card." More details, please, Ramesh!
• Finally, John Willis' CloudDroplets #20 podcast covers the 'OpenSSO in the Clouds' presentation I gave this week at the AWSome Atlanta Meetup. Thanks again for the invitation to speak, John, I had a blast!

Well - that wraps things up for this week. Don't forget to vote for OpenSSO in the SOA World Readers' Choice Awards!!!

OpenSSO Live at Telenet.be
[ aca adoption opensso telenet ]

At JavaPolis last year, I met with the folks from ACA IT-Solutions and Telenet.be (Dutch/French/English) to discuss their deployment of OpenSSO. At last, I'm able to talk about this publicly, so here we are.

Telenet.be is Belgium's largest cable operator, providing internet access, digital TV and telecom services to millions of customers across the country. Last year, ACA IT-Solutions, an independent Java EE solution provider working across the Benelux region, built an authorization solution with a centralized policy administration point (PAP), but distributed policy enforcement points (PEPs), all built on OpenSSO's authentication. As ACA IT's Wim Van Lommel says:

"We developed the web interface and security back-end service. These modules were aligned with the underlying open source access management mechanism OpenSSO. The access to the source code of OpenSSO enabled us to reuse the access management mechanism and create an integrated security solution for Telenet."

You can read more in the inaugural February 2008 edition of LSEC's Information Security Industry Report

A great example of the difference that source code access makes to system integrators!