http://developers.sun.com/identity/index.jsp Technical articles, resources, and news about Sun's identity management solutions from developers.sun.com/identity http://blogs.law.harvard.edu/tech/rss author@sun.com (Sun Microsystems) en http://java.sun.com/developer/community/askxprt/sessions/2008/jl0929.jsp Will OpenSSO support Active Directory to integrate with Windows authentication? Will it support all the databases like SQL 2005/2008 and Oracle 11g? Find the answers to these and a variety of other questions about OpenSSO in the Ask the Experts transcript. http://java.sun.com/developer/community/askxprt/sessions/2008/jl0929.jsp Tue, 07 Oct 2008 10:00:00 PST http://developers.sun.com/identity/reference/techart/webservices.html What are Web services and why are the data they transmit highly insecure? How do you protect the data interactions? What role does OpenSSO play? Sidharth Mishra, technical product manager for identity management at Sun, answers those questions in this interview. http://developers.sun.com/identity/reference/techart/webservices.html Thu, 11 Sep 2008 12:00:00 PST http://blogs.sun.com/SLevents/entry/opensso_single_sign_on_presentation Meet with Sun's Daniel Raskin and Jamie Nelson in a live chat on OpenSSO's solutions for internal access management, extranet authentication, federation, and security for web services. Register for a confirmation of the details. http://blogs.sun.com/SLevents/entry/opensso_single_sign_on_presentation Thu, 11 Sep 2008 12:00:00 PST http://developers.sun.com/identity/reference/techart/app-integration.html Learn the four ways in which to integrate web applications with OpenSSO: through the Policy Agent, a reverse proxy, the client SDK, and identity services. In addition, this article features a Ruby on Rails sample application and shows you how to secure its login process with identity services. http://developers.sun.com/identity/reference/techart/app-integration.html Tue, 26 Aug 2008 03:10:00 PST http://developers.sun.com/identity/reference/techart/identity-services.html In this interview, Sun identity architect Aravindan Ranganathan explains why OpenSSO's identity services are an ideal architecture for protecting applications from unauthorized access. He also describes the related tasks, the benefits, and the plans for integrating identity services with the federation capability in OpenSSO. http://developers.sun.com/identity/reference/techart/identity-services.html Mon, 18 Aug 2008 06:10:00 PST http://www.netbeans.org/community/releases/65/ Efficiently create web, enterprise, desktop, and mobile applications with the language of your choice: Java, C/C++ , JavaScript, Ruby, Groovy, or PHP. http://www.netbeans.org/community/releases/65/ Mon, 18 Aug 2008 06:10:00 PST http://developers.sun.com/identity/reference/techart/opends-namesvcs2.html To complete the process, configure for UNIX user authentication and for Digest-MD5 or CRAM-MD5 authentication before setting up the clients. This article walks you through the procedures and describes how to optimize for performance and edit Java settings. Read Part 1. http://developers.sun.com/identity/reference/techart/opends-namesvcs2.html Wed, 06 Aug 2008 09:05:00 PST http://wikis.sun.com/display/sunopends Commercial support and indemnification are now available for OpenDS, Sun's open-source, LDAP directory server that's written in the Java language. Also read about the many ways in which you can participate in OpenDS. http://wikis.sun.com/display/sunopends Wed, 06 Aug 2008 09:05:00 PST http://developers.sun.com/identity/reference/techart/id-svcs4.html Learn how to achieve SSO and logout by means of OpenSSO-supported REST operations. By way of demonstration, this article hosts a sample application, accompanied by the related setup procedures and code segments. http://developers.sun.com/identity/reference/techart/id-svcs4.html Wed, 30 Jul 2008 09:00:00 PST http://developers.sun.com/identity/reference/techart/opensso-support.html Breaking news: Sun is offering full support and indemnification for its open Web access management and federation project. In this interview, senior product manager Nick Wooler describes the background, the support model, and the gains for developers. http://developers.sun.com/identity/reference/techart/opensso-support.html Wed, 23 Jul 2008 12:35:00 PST http://developers.sun.com/identity/reference/techart/opends-namesvcs.html Take advantage of the newly shipped OpenDS, an open-source, LDAP directory server written in the Java language. This series explains, step by step, the intuitive setup procedure for OpenDS on the OpenSolaris OS. http://developers.sun.com/identity/reference/techart/opends-namesvcs.html Tue, 16 Jul 2008 09:30:00 PST http://www.opends.org/promoted-builds/1.0.0/ Free and open with many standard and experimental extensions, maximum interoperability with clients, rich APIs, a multimaster replication model, and other benefits. Take it for a spin! http://www.opends.org/promoted-builds/1.0.0/ Mon, 14 Jul 2008 12:00:00 PST http://nettalk.sun.com/bhive/t/1000/play.jsp?id=1484 Watch this webcast to see how this latest release's new features address key identity management challenges. http://nettalk.sun.com/bhive/t/1000/play.jsp?id=1484 Mon, 14 Jul 2008 12:00:00 PST http://www.sun.com/bigadmin/features/articles/dsee6_multimaster.jsp Sun Java System Directory Server EE 6 allows unlimited master directory servers. Read about the benefits of deploying an exclusively multimaster topology instead of a master, consumer, and replication hub topology. http://www.sun.com/bigadmin/features/articles/dsee6_multimaster.jsp Tue, 08 Jul 2008 12:00:00 PST http://www.sun.com/software/products/identity_mgr/get.jsp The latest version of Identity Manager offers numerous product enhancements and new functionality, including data export, comprehensive attestation capabilities, and improved integration of business roles. Download it now. http://www.sun.com/software/products/identity_mgr/get.jsp Fri, 27 Jun 2008 08:00:00 PST http://developers.sun.com/identity/overview/faq/perf-policy-failover-agents.jsp Besides helpful tips on performance optimization and configurations, these Q&As also offer best practices and resolutions for error scenarios. http://developers.sun.com/identity/overview/faq/perf-policy-failover-agents.jsp Tue, 17 Jun 2008 03:30:00 PST http://developers.sun.com/identity/overview/faq/libertysaml2.jsp Read more tips and guidelines: resolving errors, enabling basic authentication, mapping the SAML 2.0 Authentication Context, differentiating between the Post Profile and the Artifact Profile. http://developers.sun.com/identity/overview/faq/libertysaml2.jsp Thu, 05 Jun 2008 09:15:00 PST http://developers.sun.com/identity/reference/techart/virtualfederation.html Sun identity architect Rajeev Angal describes the challenges enterprises face with federation and explains how virtual federation, a unique capability in the upcoming Sun Federated Access Manager, effectively resolves all the issues. http://developers.sun.com/identity/reference/techart/virtualfederation.html Wed, 28 May 2008 12:15:00 PST http://www.sun.com/bigadmin/features/techtips/admin_pwd.jsp In a fix and need to reset the admin password for Sun Java System Directory Server? This tip tells you how. http://www.sun.com/bigadmin/features/techtips/admin_pwd.jsp Mon, 19 May 2008 01:10:00 PST http://developers.sun.com/identity/reference/techart/id-svcs.html Learn how to configure OpenSSO so as to authenticate users with identity-service interfaces that support SOAP with WSDL and REST. This updated article reflects the latest UI and parameters for the REST operations. http://developers.sun.com/identity/reference/techart/id-svcs.html Fri, 09 May 2008 01:10:00 PST http://java.sun.com/javaone/sf/2008/articles/openSSO.jsp At CommunityOne 2008, Sun's identity management experts describe the latest model of effecting single sign-on and the process of federating across enterprises with OpenSSO. http://java.sun.com/javaone/sf/2008/articles/openSSO.jsp Wed, 07 May 2008 01:00:00 PST http://blogs.sun.com/javaone2008/entry/a_rundown_on_opends Ludovic Poitou, community lead for OpenDS; and Jim Yang, project lead for Penrose, a Java technology-based directory server, presented at CommunityOne on the topic, "Getting Started on OpenDS." This recap summarizes the goals, status, installation, and extensibility of OpenDS, also the infrastructure of Penrose, whose default provider is OpenDS. http://blogs.sun.com/javaone2008/entry/a_rundown_on_opends Tue, 06 May 2008 01:00:00 PST http://developers.sun.com/events/communityone/index.jsp Come to CommunityOne on May 5 in San Francisco and attend an OpenSSO Workshop and a session on Getting Started With OpenDS. Registration is free. http://developers.sun.com/events/communityone/index.jsp Mon, 30 Apr 2008 01:00:00 PST http://developers.sun.com/identity/reference/techart/id-svcs3.html Identity services are interfaces that support authentication, authorization, and other related services with SOAP or REST technology. This article steps you through the procedure for obtaining, through the attribute service, the attributes of users whose tokens are passed in service calls. http://developers.sun.com/identity/reference/techart/id-svcs3.html Wed, 16 Apr 2008 01:00:00 PST http://developers.sun.com/identity/reference/techart/fedaccess.html Senior product line manager Daniel Raskin discusses the background for merging two of Sun's access and federation management products and the new capabilities that focus on simplicity, ease of use, efficiency, and convenience. http://developers.sun.com/identity/reference/techart/fedaccess.html Thu, 10 Apr 2008 03:00:00 PST http://developers.sun.com/identity/reference/techart/opensso.html Sun federation architect Pat Patterson reflects on OpenSSO, Sun's open-source project for single sign-on, outlining its mission, adoption, challenges, future, and an unexpected boon to Sun. OpenSSO is a twin of Sun Java System Access Manager. http://developers.sun.com/identity/reference/techart/opensso.html Mon, 24 Mar 2008 01:00:00 PST http://developers.sun.com/identity/reference/techart/accessmgmt.html In this interview, Jamie Nelson, Sun's director of engineering for access and federation management, points out a major oversight in Web development, elaborates on the current state of single sign-on, and suggests the right tool and the right platform for securing application access. http://developers.sun.com/identity/reference/techart/accessmgmt.html Mon, 17 Mar 2008 01:00:00 PST http://developers.sun.com/identity/overview/faq/index.jsp Here are Q&As on identity management and the service management SDK. The topics range from configurations to the Identity Repository to realms to attributes. http://developers.sun.com/identity/overview/faq/index.jsp Wed, 12 Mar 2008 01:00:00 PST http://developers.sun.com/identity/reference/techart/deployment.html What identity-related challenges do application deployers face? What considerations are involved in setting up a single sign-on solution so that users can authenticate elsewhere before accessing your application? What are the popular federated identity protocols? What questions must you ponder before adopting a standardized solution? Find the answers, along with tips and guidelines, in this article. http://developers.sun.com/identity/reference/techart/deployment.html Fri, 29 Feb 2008 01:00:00 PST https://opends.org/wiki//page/BuildingAndRunningOpenDSWithinNetbeans In only a few steps, you can build, debug, and run OpenDS--the open-source project for Sun's next-generation directory services products--in the NetBeans IDE. This article walks you through the process with screen shots. https://opends.org/wiki//page/BuildingAndRunningOpenDSWithinNetbeans Fri, 15 Feb 2008 01:00:00 PST http://developers.sun.com/identity/reference/techart/ds-perl.html Automation eradicates manual, duplicate tasks and achieves efficiency, accuracy, and uniformity. Through an example, this article shows you how to automate installation and configuration of Sun Java System Directory Server with Perl scripts. http://developers.sun.com/identity/reference/techart/ds-perl.html Mon, 11 Feb 2008 01:00:00 PST http://developers.sun.com/identity/reference/techart/4tress.html A win-win integration story: You can now adopt 4TRESS one-time password (OTP) authentication schemes in Access Manager and thus secure applications with a wider range of OTP schemes in an Access Manager-protected environment. http://developers.sun.com/identity/reference/techart/4tress.html Mon, 04 Feb 2008 01:00:00 PST http://developers.sun.com/identity/reference/techart/openid.html Paul Bryan talks with Marina Sum about his background in identity development, the history and future of Sun Java System Access Manager, OpenID, the subproject OpenSSO Extensions, and the solutions for phishing. http://developers.sun.com/identity/reference/techart/openid.html Mon, 28 Jan 2008 01:00:00 PST http://www.scmagazineus.com/Sun-Microsystems-Identity-Manager-v71/Review/1157/ Cheers to Identity Manager! SC Magazine has awarded its version 7.1 five stars in an overall rating with full marks in features, performance, documentation, and support. http://www.scmagazineus.com/Sun-Microsystems-Identity-Manager-v71/Review/1157/ Wed, 23 Jan 2008 01:00:00 PST http://developers.sun.com/identity/reference/techart/secureapps2.html As a sequel to Part 1, this article describes how to extend the authorization of Sun Java System Access Manager with a hierarchy-based resource model and interoperable Web services for .NET applications. http://developers.sun.com/identity/reference/techart/secureapps2.html Thu, 03 Jan 2008 01:00:00 PST http://developers.sun.com/identity/overview/faq/libertysaml.jsp Read about the support for SAML, Liberty Alliance-based and other federation standards, the identity-based services in Access Manager, the utilities for creating and maintaining federated connections, the components in Federation Manager, and many other pertinent topics. http://developers.sun.com/identity/overview/faq/libertysaml.jsp , ::00 http://weblogs.java.net/blog/marinasum/archive/2007/11/sun_java_system_6.html A significant milestone! http://weblogs.java.net/blog/marinasum/archive/2007/11/sun_java_system_6.html http://developers.sun.com/identity/reference/techart/id-svcs2.html Learn how to configure OpenSSO with identity services so as to allow users to perform tasks for which they have been authorized. Identity services are interfaces that support authentication, authorization, and other related services with SOAP or REST technology. http://developers.sun.com/identity/reference/techart/id-svcs2.html http://developers.sun.com/identity/overview/faq/ Two new sections are now available: Authentication and Single Sign-On (SSO) and Sessions. The topics include resets of the load-balancer cookie, failover, session timeout values, and prevention of session hijacking. http://developers.sun.com/identity/overview/faq/ http://www.sun.com/bigadmin/features/articles/nis_ldap_part1.jsp Learn how to deploy a naming service for clients that run AIX 5.3, Red Hat Linux, or the Solaris OS (releases 8, 9, or 10). http://www.sun.com/bigadmin/features/articles/nis_ldap_part1.jsp http://developer.sun.com/identity/overview/faq/ The first two sections, General and Administration Console, address interoperability, user interfaces, password resets, and other topics. More sections are forthcoming: authentication, single sign-on, Liberty Alliance and SAML. http://developer.sun.com/identity/overview/faq/ , 24 Oct 2007 ::00 http://developers.sun.com/identity/reference/techart/id-svcs.html By configuring OpenSSO, Sun's open-source project for Sun Java System Access Manager, you can authenticate users with identity-service interfaces that support SOAP/WSDL and REST. This article describes the procedure through an example application built with the NetBeans IDE. http://developers.sun.com/identity/reference/techart/id-svcs.html , 11 Oct 2007 ::00 http://developers.sun.com/identity/reference/techart/opends.html OpenDS, an open-source project for a directory service that boasts ease of use and scalability, has made remarkable strides since its launch in 2005. Read about its goals, benefits, progress, and upcoming milestones. http://developers.sun.com/identity/reference/techart/opends.html , 27 Sep 2007 ::00 http://developers.sun.com/identity/reference/techart/install.html This article describes the process, which takes only minutes to complete. Deployment works on most platforms on most containers that comply with Java Servlet 2.3. Have a try! http://developers.sun.com/identity/reference/techart/install.html , 25 Sep 2007 ::00 http://developers.sun.com/identity/reference/techart/owa.html Learn how to integrate Access Manager and OWA for single sign-on. Users can then authenticate with Access Manager and perform email tasks without logging in again. A big win in usability and time savings! http://developers.sun.com/identity/reference/techart/owa.html , 05 Sep 2007 ::00 http://www.javapassion.com/idm Sun evangelist Sang Shin's free online course starts on September 17, 2007. The course contents are created based on the Sun Java System Identity Manager (IDM) version 7.1, providing the basis for administration and development activities. Each topic has a hands-on lab that contains NetBeans IDE projects ready to open and build. http://www.javapassion.com/idm , 29 Aug 2007 ::00 http://developers.sun.com/identity/reference/techart/secure-ws.html Through a stock–quote sample, this comprehensive tutorial shows you how to use Sun Java System Access Manager and the Java Application Platform SDK with Tools bundle to secure Web services that are based on Enterprise JavaBeans technology. Part 1 describes the basics, the installation and configuration procedures, and the security profiles supported by Access Manager. Part 2 describes the process flow and explains Exercises 1−3, in which you compile, build, and deploy the projects; test the Web−service client and provider; and configure them for message−level security. Part 3 steps you through Exercises 4−5, in which you configure a WSC and a WSP for identity−enabled Web−service security and configure a stand−alone WSC. http://developers.sun.com/identity/reference/techart/secure-ws.html , 14 Aug 2007 ::00 http://developers.sun.com/identity/reference/techart/sharepoint.html This article shows you how to integrate SharePoint and Access Manager to achieve single sign-on. Subsequently, you can also administer through Access Manager the authorization policies of .NET applications that rely on Microsoft Internet Information Services (IIS). http://developers.sun.com/identity/reference/techart/sharepoint.html , 25 Jul 2007 ::00 http://developers.sun.com/identity/reference/techart/secureapps.html Through an example along with sample code and screen shots, this article explains how to achieve a fine-grained authorization model with access levels for enterprise Java applications. All the configurations are based on Access Manager's out-of-the-box capabilities. http://developers.sun.com/identity/reference/techart/secureapps.html , 25 Jun 2007 ::00 http://developers.sun.com/identity/reference/techart/single-logout.html Learn how to implement single logout, which terminates user sessions with all the members in a Circle of Trust in the Security Assertion Markup Language (SAML). This article also updates you about Project Lightbulb. http://developers.sun.com/identity/reference/techart/single-logout.html , 19 Jun 2007 ::00 http://openid.net/ OpenID is a lightweight, decentralized authentication system that is increasingly part of today's web. As part of Sun's strategy to continue delivering market−leading identity management solutions to a wide range of customers, we're committed to exploring all relevant technologies. Today we're showcasing some of the ways in which Sun is supporting OpenID, with more to come in the months ahead. The open-source OpenID Provider, which implements a complete OpenID 1.1 identity provider, has been architected to integrate smoothly with both OpenSSO and OpenDS. You can download and use it today. We've launched a specialized Identity Provider for OpenID, one that guarantees that anyone using an OpenID from this service is a Sun employee. We're in discussions with partner web sites to extend special services to Sun employees through this service; it can of course also be used as a normal OpenID identity provider by all web sites that accept OpenID logins. http://openid.net/ , 11 Jun 2007 ::00 http://developers.sun.com/learning/javaoneonline/j1lab.jsp?lab=LAB-5410&yr=2007&track=8 Learn how to configure authentication source and identity repositories with OpenSSO (Sun Java System Access Manager) deployed within the Java Application Platform SDK. This lab also demonstrates how to secure Web services with standard security mechanisms. (SDN registration (free) required.) http://developers.sun.com/learning/javaoneonline/j1lab.jsp?lab=LAB-5410&yr=2007&track=8 , 11 Jun 2007 ::00 http://www.sun.com/standards/persistent/openid/ Sun has issued a Non-Assertion Covenant (NAC), which promises that Sun will not enforce patents against developers of OpenID technology. This means that Sun will not impose licensing terms, conditions, or fees for the use of any patents held by Sun related to OpenID V1.1 or OpenID Simple Registration V1.0. The only condition is that developers refrain from asserting their own (or others') patents against any other OpenID implementation developer. http://www.sun.com/standards/persistent/openid/ , 21 May 2007 ::00 http://developers.sun.com/identity/reference/techart/sso.html Standardized exchanges of authentication and authorization data by means of the Security Assertion Markup Language between an identity provider and a service provider form the basis of single sign-on. This article explains the concepts and the process with an example, in which Sun Java System Access Manager 7.1 is the identity provider and SAP NetWeaver Enterprise Portal 2004s is the service provider, complete with source code and graphics. http://developers.sun.com/identity/reference/techart/sso.html , 24 Apr 2007 ::00 http://developers.sun.com/identity/reference/techart/cardspace.html Extending OpenSSO (Sun's open Web access management project based on Sun Java System Access Manager) with Windows CardSpace delivers a more secure authentication model than the traditional user name-password model. This article describes the benefits, basic architecture, and process flow of a lightweight implementation developed by ICSynergy International, an Elite Sun Partner that specializes in identity management and identity-enabled SOA solutions. http://developers.sun.com/identity/reference/techart/cardspace.html , 17 Apr 2007 ::00 http://developers.sun.com/identity/reference/techart/secure-ws.html Privacy protection is mandatory for Web services. Through an example of a stock-quote service, this tutorial describes how to secure Web-service communications with Sun Java System Access Manager, the NetBeans 5.5 IDE, and the Java Application Platform SDK with Tools bundle. http://developers.sun.com/identity/reference/techart/secure-ws.html , 26 Feb 2007 ::00 http://developers.sun.com/identity/reference/techart/lightbulb.html Open-source Project Lightbulb brings federated identity to numerous platforms, thanks to a Lightbulb service provider, developed in PHP, and Security Assertion Markup Language 2.0. Here, you learn how to enable PHP applications on the Web, helped by the service provider, an identity provider, and SAML 2.0. http://developers.sun.com/identity/reference/techart/lightbulb.html , 05 Feb 2007 ::00