Superpatterns

I've written many times over the past couple of years on OpenSSO's Extensions - modules, mainly contributed from the wider community, that extend or interoperate with OpenSSO in interesting ways - from a Ruby SAML 2.0 service provider to authentication modules for Yubikey, Hitachi Finger Vein Biometric and more.

I just got done adding an authentication module for JA-SIG CAS, kindly contributed by Qingfeng Zhang, so it seems like a good time to have a round up of recent extensions news...

• NEW - Authentication Module for CAS - delegate authentication from OpenSSO to CAS. I blogged about this a little while ago; Qingfeng got in touch and offered it as an OpenSSO Extension. See the README for detailed instructions for getting it up and running.
• UPDATED - Authentication Module for Information Cards - delegate authentication from OpenSSO to Microsoft CardSpace and other information card providers. Patrick Petit has extensively revamped the InfoCard RP auth module, removing the need for a standalone JavaDB instance and adding configuration pages - see the README for full details.
• NEW - Authentication Module for ValidSoft VALid - Joachim Andres contributed this one recently - read his blog entry or see the README for more.

If you have an idea for an OpenSSO Extension, just leave a comment or and I'll fix you up with a directory in the OpenSSO CVS tree and appropriate access.

Chatting in the OpenSSO IRC channel today about OpenSSO versus a range of other open source single sign-on projects, I was passed a link to Fast and Free SSO: A Survey of Open-Source Solutions to Single Sign-On [PDF] - a presentation from JavaOne 2007. Amazing - I had no idea! I was at JavaOne 2007 and somehow missed this. While it's obviously a little out of date, Craig Dickson and Naveen Nallannagari of Behr (the paint people) do a great job of surveying the open source SSO landscape. Well worth a look if you're in the market for open source SSO - go read the paper, then visit OpenSSO for all your open source single-sign on needs

Hot on the heels of last week's Jira plugin, Qingfeng Zhang (all I have is the name) has posted an an entry to the JA-SIG CAS wiki explaining how to integrate Sun Access Manager (aka OpenSSO) with JA-SIG CAS via an OpenSSO authentication module. This integration lets users login to CAS and access resources protected by OpenSSO. Nice work!

Again, I haven't tried this out yet, but, if you have, let me know in the comments how you got on...