OpenSSO

OpenSSO based on the code base of Sun Java System Access Manager

basic architecture of identity services

Install

事先安装好 OpenDS 目录服务, Using OpenDS as a user data store for OpenSSO

下载获得 opensso.war, 部署到 GlassFish 上

Federated Access Manager Architecture

通过 http://localhost:8080/opensso 进行配置, 出错

Installing embedded config in :/home/allen/opensso/opends...Done
Creating FAM suffix...Done
"Loading Schema:"am_sm_ds_schema.ldif...Success.
"Loading Schema:"am_remote_opends_schema.ldif...Success.
"Loading Schema:"fam_sds_schema.ldif...Success.
Register service:amEntrySpecific.xml
Status: Failed
Please check the server logs: /home/allen/opensso/opensso/debug

To fix the above error, please do the following :

1. Change jvm-options from “-client” to “-server”in domain.xml

2. Change jvm-options from -Xmx512m to -Xmx1024m in domain.xml

Then remove the configuration directory /home/allen/opensso and re-run the OpenSSO configurator.

Key Features

• Single sign-on (SSO)
• Centralized authorization services
• Federated Identity support
• J2EE architecture and comprehensive APIs
• Enterprise-class scalability and reliability
• Real-time audit

Supported standards

• Java Authentication and Authorization Service (JAAS)
• Kerberos
• Lightweight Directory Access Protocol (LDAP)
• Liberty ID-FF
• Liberty Identity Web Services Framework (ID-WSF)
• SAML
• SOAP
• Secure Sockets Layer (SSL)
• WS-I Basic Security Profile tokens
• XML Digital Signature
• XML Encryption

Supported authentication modules

• Active Directory
• Anonymous
• Certificate
• HTTP Basic
• Java Database Connectivity (JDBC)
• LDAP
• Membership
• Mobile Subscriber ISDN (MSISDN)
• Password Playback
• RADIUS
• SafeWord
• SAML

GlassFish

Configure OpenSSO with OpenDS as configuration repository

Solaris|OpenDS|GlassFish|OpenSSO - A Perfect Union

Docs

• Securing Applications With Identity Services, Part 1: Authentication
• Securing Applications With Identity Services, Part 2: Authorization
• Securing Applications With Identity Services, Part 3: User Attributes

Links

• https://opensso.dev.java.net/
• http://wikis.sun.com/display/OpenSSO
• http://docs.huihoo.com/opensso/
• http://download.huihoo.com/opensso/
• OpenSSO Agent for SJS AS 8.2 (and soon for GlassFish) - http://blogs.sun.com/page/theaquarium?anchor=opensso_agent_for_sjs_as