I had a note from the OpenSSO Meetup group the other day announcing an ‘OpenSSO Brukergruppemøte‘ (OpenSSO user group meeting, according to Google Translate) in Oslo, Norway, on Thursday April 22, 2010. Norway has long been a hub of OpenSSO activity; it’s great to see this continuing into OpenSSO’s post-Sun existence. Go along and say “Hei!” to Jonathan and the rest of the ForgeRock guys from me!
Archive for the ‘OpenSSO’ Category
OpenSSO Brukergruppemøte
Monday, April 12th, 2010The ForgeRock OpenSSO Roadshow comes to North America!
Monday, February 22nd, 2010
My friends at ForgeRock are bringing their series of OpenSSO user group meetings to the USA and Canada in late March/early April 2010. If you’re interested in where they’re taking open source identity, you should definitely take this opportunity to participate in one of the meetings – choose from New York (3/29), Toronto (3/30), Chicago (3/31) or San Francisco (4/1). I’ll likely take the drive up 280 to the SF event on April 1st – see you there!
OpenSSO User Group Meetings in Northern Europe – Nov/Dec 2009
Wednesday, November 18th, 2009
Although I’m no longer as active in the OpenSSO community as I once was, some things still catch my eye – for example, news of a series of user group meetings across Northern Europe in late November and early December. OpenSSO experts Allan Foster, Jonathan Scudder, Steve Ferris and Victor Ake (not a blogger amongst them!?!?) will be presenting on OpenSSO-related topics ranging from monitoring to the Fedlet, via entitlements and OAuth, in Helsinki, Stockholm, Copenhagen, Oslo, London and Brussels. Seems like SupportRock might be a name to watch in the world of OpenSSO…
Easier Microsoft Active Directory Connectivity in OpenSSO Express 8
Tuesday, September 15th, 2009
It’s nice to see your RFE’s implemented, and that’s exactly what happened with OpenSSO issue # 4053: Active Directory configuration should use AD domain name rather than LDAP host/port. I saw Kohsuke‘s blog entry on More Active Directory integration in Java a little while ago and realized that we could take exactly the same approach in OpenSSO – prompt the admin for the Active Directory domain name rather than a host name and port number.
As Kohsuke mentions, this has a number of advantages – every AD admin knows the domain name, while many would likely have to go look up an individual host name, not to mention the LDAP port number. Since we use the domain name to look up an individual AD controller via DNS, it also means that the admin doesn’t need to update OpenSSO’s configuration as AD controllers come and go – OpenSSO will always get a valid host name from DNS.
So, when configuring OpenSSO Express 8, you can now just specify the AD domain name. As improvements go, this one is pretty small, but, as I think everyone agrees, the cumulative effect of all these little improvements in OpenSSO over the past two or three years has been HUGE…
OpenSSO Tab Sweep – Sep 11 2009
Friday, September 11th, 2009 
Wow – it’s been months since the last OpenSSO tab sweep. Anyway – here’s a collection of the latest news from the world of OpenSSO:
- Sun Developer Network continues to publish excellent articles on OpenSSO. Last month, Rick Palkovic of SDN and Francois Lascelles of Layer 7 Techologies collaborated on Delegating XML Gateway Runtime Authorization to OpenSSO, showing how Layer 7′s SecureSpan XML Networking Gateway integrates with OpenSSO to provide edge security for SOA, Web 2.0 and cloud-based web services.
- This month, Rick’s written another article, this time with Qingwen Cheng and Mrudul Uchil of Sun’s OpenSSO engineering team. Enabling IP/Resource/Environment Based Authentication With OpenSSO is a three-part series explaining how this functionality, new in OpenSSO Express Build 8, replaces the pre-existing Gateway servlet to provide a flexible mechanism for including contextual information in the authentication process.
- My colleague, Hubert Le Van Gong has been blogging profusely over the past few weeks on the topic of OpenID 2.0 and OpenSSO. As Hubert mentions, we recently rewrote the OpenSSO OpenID extension to support OpenID 2.0. Hubert’s blog entries cover a number of topics specific to the rewrite, including deployment (with an important follow up) and realm/relying party validation. C’est la Vie is definitely a blog worth watching if you’re interested in the OpenID/OpenSSO intersection.
- There have been a number of OpenSSO policy agent releases over the past few weeks, including agents for Apache 2.2 and IIS 7. The OpenSSO Policy Agents 3.0 Roadmap is the place to stay up to date.
- The replay of Daniel‘s OpenSSO webinar from last month, which, by the way, set an internal record for registrations, has been posted online. Click here to catch up.
- Outside Sun, ‘Pairg‘ has released a WordPress plugin for OpenSSO authentication (thanks, Ramoonus, for the tip!). It looks to have much more functionality than the proof of concept code I released a little while ago, so, if you’re into WordPress, I recommend you go take a look.
Now I can close a few Firefox tabs and relax. Have a good weekend, everyone!
OpenSSO Express Build 8 Released
Friday, September 4th, 2009 
A few weeks ago, I blogged about the impending release of OpenSSO Express Build 8; well, the OpenSSO engineers have been hard at work since then, and Express 8 was officially released yesterday.
Among the new features:
- One time password-based strong authentication
- Fedlet for .Net
- MySQL user data store
- First cut of the Entitlement Service
- Task flow for federation with SalesForce.com
- First look at the new IceFaces-based administration console
Much more detail in the OpenSSO Express 8 release notes. If you’re wondering just what an ‘Express Build’ of OpenSSO is, the FAQ reveals all.
OpenSSO, Jack Adams and me
Wednesday, August 19th, 2009At OSCON a few weeks ago, I spent a little time with OpenSolaris enthusiast Jack Adams (who doesn’t seem to have his own page, but is often in the company of Bruno Souza and Deirdré Straughan), chatting about the basics of OpenSSO, single sign-on and federation. Luckily, it was all caught on video…
Free Webinar: OpenSSO Express for Improved SSO
Tuesday, August 18th, 2009 
Short notice, but if you have a spare hour tomorrow (Wednesday August 19th 2009) morning, Daniel Raskin, Sun’s Chief Identity Strategist, and I will be presenting a webinar titled OpenSSO Express for Improved SSO. Join us at 10am PDT/1pm EDT/7pm CET for an update on the very latest features in OpenSSO Express 8 and beyond, such as mobile one-time passwords, the Fedlet for .Net, SalesForce.com integration and OAuth.
Securing REST Web Services With OAuth
Monday, August 17th, 2009 
It’s been a while since the last OpenSSO article at Sun Developer Network (the excellent, three-part, Troubleshooting OpenSSO with Firefox Add-Ons), but Malla and Rick have come up trumps with Securing REST Web Services With OAuth.
The article recasts the tried and true ‘stock quote sample’ as a RESTful web service with access protected by OAuth via OpenSSO and Jersey (Sun’s open source implementation of JAX-RS, aka JSR 311). This is technology that has hitherto only been demonstrated in a demo at JavaOne 2009, so it’s great to see it being successfully applied here.
Go read the article and discover how OpenSSO, Jersey and OAuth combine to secure RESTful web services!
OpenSSO Single Sign-on Extension for MediaWiki
Tuesday, August 11th, 2009 
Following the recent trio of OpenSSO Extensions targeting PHP CMS applications (see my previous entries covering the extensions for Drupal, WordPress and Joomla), I decided to look at MediaWiki, the PHP application powering Wikipedia and many other wikis across the web.
In common with the CMS apps, MediaWiki has a very pluggable architecture, making implementation of a single sign-on extension very straightforward, and I was able to get an initial implementation done in a few hours. The user interface is very like the WordPress plugin: just click on the regular ‘log in’ link to be sent to OpenSSO to authenticate; on returning to MediaWiki, the extension validates the OpenSSO cookie and uses it to retrieve the username from OpenSSO, setting up the MediaWiki session.
There is a README and source code – also available via CVS, and I’ve added the new provider plugin to the list on the OpenSSO Extensions page. As always, note that none of these extensions are supported by Sun, and all should be considered ‘proof of concept’ quality – they likely need a bit more polish (and lots more testing!) before being deployed into production.
I think that about wraps up the PHP extension story for the time being – we now have plugins for the four most common PHP web apps. Do leave a comment if you think there is another we should cover.
