Superpatterns

Pat Patterson on Identity Management, Federation and Single Malt Scotch

accessmanager adoption authentication bloggers burtongroup catalyst community extensions federation google identity libertyalliance lightbulb links opends openid opensource opensso php saml sdn security sso sun webservices

17 Jul · Fri 2009

links for 2009-07-17
[ oauth opensso rest salesforce saml security sso webservices ]

SAML 2.0 SSO with Salesforce.com CRM : Rajeev's Blog

Salesforce.com added SAML 2 support in the Winter 09 release a few months ago. This blog by Sun's Rajeev Angal explains how to configure OpenSSO for single sign-on to Salesforce.com using SAML 2.0.

(tags: salesforce saml opensso sso)
Technology Preview: OpenSSO OAuth Token Service - The Smoking Monkey

Preview of OpenSSO's new OAuth Token Service. You can now use REST and the OAuth Token Service for securing your apps. It's a nice, light-weight alternative to WS-*.

(tags: oauth opensso security webservices rest)

@ 10:03 AM PDT

12 Dec · Fri 2008

OpenSSO Tab Sweep - Dec 12 2008
[ .net aca atlanta awsome biometric fedlet glassfish markmail opensso pki salesforce saml sdn sharepoint telenet ]

It's been a while since the last tab sweep - lots of news since then, such as the OpenSSO Enterprise 8.0 release, that's kept me busy both here on the blog and 'in real life' (if there is such a thing any more!). Anyway, here are some of the titbits I've been saving for a tab sweep blog post:

I posted another OpenSSO adoption story to the Stories blog this morning: ACA IT-Solutions deploys OpenSSO at Telenet for fine-grained access control. You might remember I blogged about Telenet a little while ago, well, when we started covering OpenSSO on the Stories blog, Serge Craeghs of ACA IT-Solutions kindly completed the questionnaire for the Telenet deployment, with all sorts of juicy details - read all about it.
Another nifty feature of MarkMail - project-based homepages. Just go to http://opensso.markmail.org/ and you can search and browse just the OpenSSO mailing lists. Very cool!
Bert van Beeck writes about using SAML 1.x or SAML 2.0 to authenticate SharePoint users, with OpenSSO acting as a bridge between the Belgian Federal Authentication Service - FAS (a SAML 1.1 identity provider) and Microsoft SharePoint (which can speak WS-Federation, but not plain SAML 1.1).
On The Open Road, David Goldsmith explains how to work around issues in GlassFish V3 Prelude's cookie handling to allow OpenSSO to work correctly, with a nod to Dennis' diagnosis of the problem.
Although the Fedlet has been available for Java EE platforms for some time now, it's always been our intention to support .Net also, so it's great to see Rajeev Angal putting together a .Net Fedlet prototype. Give it a try and let Rajeev know how it goes.
Rajeev strikes again, alongside Marina Sum, with a Sun Developer Network article on Federated Single Sign-On for Salesforce in OpenSSO. It's amazing how easy these integrations are now that SAML has become so widespread. There might just be something to these 'standards' we keep hearing about
Over at Core Security Patterns, Ramesh Nagappan tantalizes us with a glimpse of a solution composed of Match-to-SmartCard PKI and Biometric authentication - starring OpenSSO in "multi-factor authentication based Web SSO that uses on-card credentials (PIN + PKI + Biometrics) using PIV card." More details, please, Ramesh!
Finally, John Willis' CloudDroplets #20 podcast covers the 'OpenSSO in the Clouds' presentation I gave this week at the AWSome Atlanta Meetup. Thanks again for the invitation to speak, John, I had a blast!

Well - that wraps things up for this week. Don't forget to vote for OpenSSO in the SOA World Readers' Choice Awards!!!

@ 04:09 PM PST

10 Oct · Fri 2008

OpenSSO Tab Sweep
[ asktheexpert opensso rajeev salesforce sdn sidharthmishra ]

By now, you're probably familiar with the term 'tab sweep', particularly if you've read either of Tim or Rich's blogs. You end the week with a bunch of tabs open in your browser that you need to blog about, so you do. Here's my first...

First up, Rajeev's Blog. There's some great stuff there from the past few weeks - my favourites are How to Integrate OpenSSO with Salesforce.com via SAML and the OpenSSO QuickStart prototype. If you have any interest at all in OpenSSO, you need to subscribe to Rajeev (or to Planet OpenSSO, which aggregates Rajeev's Blog with a whole host of others).
Next is the transcript from last week's OpenSSO 'Ask The Experts' session at the Sun Developer Network. There's some great stuff in there - from the scheduled release date for OpenSSO Enterprise 8.0 (October 31st) to some low level detail on configuring OpenLDAP as a user store for OpenSSO.
While we're over at Sun Developer Network, Sidharth and Marina have an article on Deploying OpenSSO on GlassFish Application Server - great stuff for folks picking up OpenSSO for the first time, with handy tips for established OpenSSO fans too - some very neat command line alternatives for configuring GlassFish and deploying the OpenSSO WAR file.