Superpatterns

By now, you're probably familiar with the term 'tab sweep', particularly if you've read either of Tim or Rich's blogs. You end the week with a bunch of tabs open in your browser that you need to blog about, so you do. Here's my first...

• First up, Rajeev's Blog. There's some great stuff there from the past few weeks - my favourites are How to Integrate OpenSSO with Salesforce.com via SAML and the OpenSSO QuickStart prototype. If you have any interest at all in OpenSSO, you need to subscribe to Rajeev (or to Planet OpenSSO, which aggregates Rajeev's Blog with a whole host of others).
• Next is the transcript from last week's OpenSSO 'Ask The Experts' session at the Sun Developer Network. There's some great stuff in there - from the scheduled release date for OpenSSO Enterprise 8.0 (October 31st) to some low level detail on configuring OpenLDAP as a user store for OpenSSO.
• While we're over at Sun Developer Network, Sidharth and Marina have an article on Deploying OpenSSO on GlassFish Application Server - great stuff for folks picking up OpenSSO for the first time, with handy tips for established OpenSSO fans too - some very neat command line alternatives for configuring GlassFish and deploying the OpenSSO WAR file.

There - I feel lighter now I got all that off my chest. Have a good weekend, everyone!

Over at Sun Developer Network today, Sidharth Mishra talks to Marina Sum about Security for Web Services. It's an interesting, high-level discussion, covering both the motivations for securing Web services and some of the standards and technology in the area. In particular, there's a useful explanation of the role of the Security Token Service (STS) in brokering trust between Web service consumers and providers.

Get yourself a nice cup of tea (or, if you must, coffee ) and give it a read.