Sun Microsystems RSS Feeds

Identity Management Headlines

Ask the Experts Transcript: OpenSSO
Will OpenSSO support Active Directory to integrate with Windows authentication? Will it support all the databases like SQL 2005/2008 and Oracle 11g? Find the answers to these and a variety of other questions about OpenSSO in the Ask the Experts transcript.

From the Trenches at Sun Identity, Part 7: Security for Web Services
What are Web services and why are the data they transmit highly insecure? How do you protect the data interactions? What role does OpenSSO play? Sidharth Mishra, technical product manager for identity management at Sun, answers those questions in this interview.

Join a Second Life Session on OpenSSO at 8:00 a.m. PT, Tuesday, September 30
Meet with Sun's Daniel Raskin and Jamie Nelson in a live chat on OpenSSO's solutions for internal access management, extranet authentication, federation, and security for web services.

Integrating Applications With OpenSSO
Learn the four ways in which to integrate web applications with OpenSSO: through the Policy Agent, a reverse proxy, the client SDK, and identity services. In addition, this article features a Ruby on Rails sample application and shows you how to secure its login process with identity services.

From the Trenches at Sun Identity, Part 6: Identity Services for Securing Web Applications
In this interview, Sun identity architect Aravindan Ranganathan explains why OpenSSO's identity services are an ideal architecture for protecting applications from unauthorized access. He also describes the related tasks, the benefits, and the plans for integrating identity services with the federation capability in OpenSSO.

Download NetBeans IDE 6.5 Beta
Efficiently create web, enterprise, desktop, and mobile applications with the language of your choice: Java, C/C++ , JavaScript, Ruby, Groovy, or PHP.

Setting Up OpenDS 1.0.0 as a Naming Service for the OpenSolaris OS, Part 2 of 2: Advanced Configurations
To complete the process, configure for UNIX user authentication and for Digest-MD5 or CRAM-MD5 authentication before setting up the clients. This article walks you through the procedures and describes how to optimize for performance and edit Java settings. Read

Sun Announces OpenDS Standard Edition (SE) 1.0
Commercial support and indemnification are now available for

Securing Applications With Identity Services, Part 4: Single Sign-On and Logout
Learn how to achieve SSO and logout by means of OpenSSO-supported REST operations. By way of demonstration, this article hosts a sample application, accompanied by the related setup procedures and code segments.

From the Trenches at Sun Identity, Part 5: Support for OpenSSO
Breaking news: Sun is offering full support and indemnification for its open Web access management and federation project. In this interview, senior product manager Nick Wooler describes the background, the support model, and the gains for developers.

Setting Up OpenDS 1.0.0 as a Naming Service for the OpenSolaris OS, Part 1 of 2: Basic Steps
Take advantage of the newly shipped OpenDS, an open-source, LDAP directory server written in the Java language. This series explains, step by step, the intuitive setup procedure for OpenDS on the OpenSolaris OS.

OpenDS 1.0.0, Open-Source LDAP Directory Server in Java Language, Ships
Free and open with many standard and experimental extensions, maximum interoperability with clients, rich APIs, a multimaster replication model, and other benefits. Take it for a spin!

Sun Net Talk: Sun Identity Manager 8.0
Watch this webcast to see how this latest release's new features address key identity management challenges.

Multimaster Deployment of Sun Java System Directory Server Enterprise Edition 6
Sun Java System Directory Server EE 6 allows unlimited master directory servers. Read about the benefits of deploying an exclusively multimaster topology instead of a master, consumer, and replication hub topology.

Sun Identity Manager 8.0 Released
The latest version of Identity Manager offers numerous product enhancements and new functionality, including data export, comprehensive attestation capabilities, and improved integration of business roles. Download it now.

Access Manager FAQ: Performance and Sizing, Policy, Session Failover and Deployment, and Agents
Besides helpful tips on performance optimization and configurations, these Q&As also offer best practices and resolutions for error scenarios.

Second Segment of Access Manager FAQ on SAML
Read more tips and guidelines: resolving errors, enabling basic authentication, mapping the SAML 2.0 Authentication Context, differentiating between the Post Profile and the Artifact Profile.

From the Trenches at Sun Identity, Part 4: Virtual Federation, a Pioneering Way for Exchanging Authentication Data
Sun identity architect Rajeev Angal describes the challenges enterprises face with federation and explains how virtual federation, a unique capability in the upcoming Sun Federated Access Manager, effectively resolves all the issues.

Resetting the admin Password in Sun Java System Directory Server
In a fix and need to reset the admin password for Sun Java System Directory Server? This tip tells you how.

Updated: Securing Applications With Identity Services, Part 1: Authentication
Learn how to configure OpenSSO so as to authenticate users with identity-service interfaces that support SOAP with WSDL and REST. This updated article reflects the latest UI and parameters for the REST operations.

An Overview and Demonstration of OpenSSO and Federation
At CommunityOne 2008, Sun's identity management experts describe the latest model of effecting single sign-on and the process of federating across enterprises with OpenSSO.

A Rundown on OpenDS
Ludovic Poitou, community lead for OpenDS; and Jim Yang, project lead for Penrose, a Java technology-based directory server, presented at CommunityOne on the topic, "Getting Started on OpenDS." This recap summarizes the goals, status, installation, and extensibility of OpenDS, also the infrastructure of Penrose, whose default provider is OpenDS.

Identity Management at CommunityOne
Come to CommunityOne on May 5 in San Francisco and attend an OpenSSO Workshop and a session on Getting Started With OpenDS. Registration is free.

Securing Applications With Identity Services, Part 3: User Attributes
Identity services are interfaces that support authentication, authorization, and other related services with SOAP or REST technology. This article steps you through the procedure for obtaining, through the attribute service, the attributes of users whose tokens are passed in service calls.

From the Trenches at Sun Identity, Part 3: Federated Access Management Simplified
Senior product line manager Daniel Raskin discusses the background for merging two of Sun's access and federation management products and the new capabilities that focus on simplicity, ease of use, efficiency, and convenience.

From the Trenches at Sun Identity, Part 2: OpenSSO, a Thriving Community
Sun federation architect Pat Patterson reflects on OpenSSO, Sun's open-source project for single sign-on, outlining its mission, adoption, challenges, future, and an unexpected boon to Sun. OpenSSO is a twin of Sun Java System Access Manager.

From the Trenches at Sun Identity, Part 1: Access Management for Web Applications
In this interview, Jamie Nelson, Sun's director of engineering for access and federation management, points out a major oversight in Web development, elaborates on the current state of single sign-on, and suggests the right tool and the right platform for securing application access.

Two New FAQ Segments for Sun Java System Access Manager
Here are Q&As on identity management and the service management SDK. The topics range from configurations to the Identity Repository to realms to attributes.

Federated Identity Through the Eyes of the Deployer
What identity-related challenges do application deployers face? What considerations are involved in setting up a single sign-on solution so that users can authenticate elsewhere before accessing your application? What are the popular federated identity protocols? What questions must you ponder before adopting a standardized solution? Find the answers, along with tips and guidelines, in this article.

Building and Running OpenDS With NetBeans IDE
In only a few steps, you can build, debug, and run OpenDS--the open-source project for Sun's next-generation directory services products--in the NetBeans IDE. This article walks you through the process with screen shots.

Perl Scripts Offer Quick, Accurate Installation and Configuration of Sun Java System Directory Server
Automation eradicates manual, duplicate tasks and achieves efficiency, accuracy, and uniformity. Through an example, this article shows you how to automate installation and configuration of Sun Java System Directory Server with Perl scripts.

Authenticate With Sun Java System Access Manager and ActivIdentity 4TRESS Authentication Server
A win-win integration story: You can now adopt 4TRESS one-time password (OTP) authentication schemes in Access Manager and thus secure applications with a wider range of OTP schemes in an Access Manager-protected environment.

Sun Technical Specialist on Identity and OpenSSO Extensions
Paul Bryan talks with Marina Sum about his background in identity development, the history and future of Sun Java System Access Manager, OpenID, the subproject OpenSSO Extensions, and the solutions for phishing.

A Five-Star Score for Sun Java System Identity Manager
Cheers to Identity Manager! SC Magazine has awarded its version 7.1 five stars in an overall rating with full marks in features, performance, documentation, and support.

Developing Secure Applications With Sun Java System Access Manager, Part 2: Advanced Authorization
As a sequel to Part 1, this article describes how to extend the authorization of Sun Java System Access Manager with a hierarchy-based resource model and interoperable Web services for .NET applications.

New Section for Sun Java System Access Manager and Sun Java System Federation Manager FAQ: Liberty Alliance and Security Assertion Markup Language
Read about the support for SAML, Liberty Alliance-based and other federation standards, the identity-based services in Access Manager, the utilities for creating and maintaining federated connections, the components in Federation Manager, and many other pertinent topics.

Gartner Places Sun Java System Access Manager in Leaders Quadrant
A significant milestone!

Securing Applications With Identity Services, Part 2: Authorization
Learn how to configure OpenSSO with identity services so as to allow users to perform tasks for which they have been authorized. Identity services are interfaces that support authentication, authorization, and other related services with SOAP or REST technology.

Two New Sections for Sun Java System Access Manager and Sun Java System Federation Manager FAQ
Two new sections are now available: Authentication and Single Sign-On (SSO) and Sessions. The topics include resets of the load-balancer cookie, failover, session timeout values, and prevention of session hijacking.

Sun Java System Directory Server 6.0 as an LDAP Naming Service
Learn how to deploy a naming service for clients that run AIX 5.3, Red Hat Linux, or the Solaris OS (releases 8, 9, or 10).

Sun Java System Access Manager and Sun Java System Federation Manager FAQ
The first two sections, General and Administration Console, address interoperability, user interfaces, password resets, and other topics. More sections are forthcoming: authentication, single sign-on, Liberty Alliance and SAML.

Securing Applications With Identity Services, Part 1: Authentication
By configuring OpenSSO, Sun's open-source project for Sun Java System Access Manager, you can authenticate users with identity-service interfaces that support SOAP/WSDL and REST. This article describes the procedure through an example application built with the NetBeans IDE.

Introducing the OpenDS Project
OpenDS, an open-source project for a directory service that boasts ease of use and scalability, has made remarkable strides since its launch in 2005. Read about its goals, benefits, progress, and upcoming milestones.

Installing, Configuring, and Deploying Sun Java System Access Manager the Simple Way
This article describes the process, which takes only minutes to complete. Deployment works on most platforms on most containers that comply with Java Servlet 2.3. Have a try!

Sun and Microsoft Interoperate for Web Authentication, Part 3: Sun Java System Access Manager and Microsoft Outlook Web Access for Exchange Server 2003
Learn how to integrate Access Manager and OWA for single sign-on. Users can then authenticate with Access Manager and perform email tasks without logging in again. A big win in usability and time savings!

Sun Identity Manager (With Passion!) Free Online Course
Sun evangelist Sang Shin's free online course starts on September 17, 2007. The course contents are created based on the Sun Java System Identity Manager (IDM) version 7.1, providing the basis for administration and development activities. Each topic has a hands-on lab that contains NetBeans IDE projects ready to open and build.

A Tutorial on Applying Web-Service Security to EJB Applications
Through a stock–quote sample, this comprehensive tutorial shows you how to use Sun Java System Access Manager and the Java Application Platform SDK with Tools bundle to secure Web services that are based on Enterprise JavaBeans technology. Part 1 describes the basics, the installation and configuration procedures, and the security profiles supported by Access Manager. Part 2 describes the process flow and explains Exercises 1−3, in which you compile, build, and deploy the projects; test the Web−service client and provider; and configure them for message−level security. Part 3 steps you through Exercises 4−5, in which you configure a WSC and a WSP for identity−enabled Web−service security and configure a stand−alone WSC.

Sun and Microsoft Interoperate for Web Authentication, Part 2: Sun Java System Access Manager and SharePoint Portal Server 2003
This article shows you how to integrate SharePoint and Access Manager to achieve single sign-on. Subsequently, you can also administer through Access Manager the authorization policies of .NET applications that rely on Microsoft Internet Information Services (IIS).

Developing Secure Applications With Sun Java System Access Manager, Part 1: Basic Authorization
Through an example along with sample code and screen shots, this article explains how to achieve a fine-grained authorization model with access levels for enterprise Java applications. All the configurations are based on Access Manager's out-of-the-box capabilities.

Single Logout: A Demo
Learn how to implement single logout, which terminates user sessions with all the members in a Circle of Trust in the Security Assertion Markup Language (SAML). This article also updates you about Project Lightbulb.

OpenID at Sun
OpenID is a lightweight, decentralized authentication system that is increasingly part of today's web. As part of Sun's strategy to continue delivering market−leading identity management solutions to a wide range of customers, we're committed to exploring all relevant technologies. Today we're showcasing some of the ways in which Sun is supporting OpenID, with more to come in the months ahead. The open-source OpenID Provider, which implements a complete OpenID 1.1 identity provider, has been architected to integrate smoothly with both OpenSSO and OpenDS. You can download and use it today. We've launched a specialized Identity Provider for OpenID, one that guarantees that anyone using an OpenID from this service is a Sun employee. We're in discussions with partner web sites to extend special services to Sun employees through this service; it can of course also be used as a normal OpenID identity provider by all web sites that accept OpenID logins.

Hands-On Lab: Securing Identity Web Services (LAB-5410)
Learn how to configure authentication source and identity repositories with OpenSSO (Sun Java System Access Manager) deployed within the Java Application Platform SDK. This lab also demonstrates how to secure Web services with standard security mechanisms. (SDN registration (free) required.)

Sun Reassures OpenID Developers
Sun has issued a Non-Assertion Covenant (NAC), which promises that Sun will not enforce patents against developers of OpenID technology. This means that Sun will not impose licensing terms, conditions, or fees for the use of any patents held by Sun related to OpenID V1.1 or OpenID Simple Registration V1.0. The only condition is that developers refrain from asserting their own (or others') patents against any other OpenID implementation developer.

Achieving SSO With Sun Java System Access Manager and SAML
Standardized exchanges of authentication and authorization data by means of the Security Assertion Markup Language between an identity provider and a service provider form the basis of single sign-on. This article explains the concepts and the process with an example, in which Sun Java System Access Manager 7.1 is the identity provider and SAP NetWeaver Enterprise Portal 2004s is the service provider, complete with source code and graphics.

Securing Sites With CardSpace and OpenSSO: An Overview
Extending OpenSSO (Sun's open Web access management project based on Sun Java System Access Manager) with Windows CardSpace delivers a more secure authentication model than the traditional user name-password model. This article describes the benefits, basic architecture, and process flow of a lightweight implementation developed by ICSynergy International, an Elite Sun Partner that specializes in identity management and identity-enabled SOA solutions.

Securing Communications in Web Services: A Tutorial
Privacy protection is mandatory for Web services. Through an example of a stock-quote service, this tutorial describes how to secure Web-service communications with Sun Java System Access Manager, the NetBeans 5.5 IDE, and the Java Application Platform SDK with Tools bundle.

Switch on SAML for PHP With Project Lightbulb
Open-source Project Lightbulb brings federated identity to numerous platforms, thanks to a Lightbulb service provider, developed in PHP, and Security Assertion Markup Language 2.0. Here, you learn how to enable PHP applications on the Web, helped by the service provider, an identity provider, and SAML 2.0.