https://www.bibsonomy.org/user/gresch/ssoBibSonomy RSS Feed for /user/gresch/ssoIntegration components, mostly for Attlassian products. Claiming that these products run out-of-the-box and save 1000s of costs for individual integration.https://appfusions.com/display/Dashboard/Bringing+it+together%2C+NOWgresch2012-10-12T09:17:12+02:00attlassian confluence integration jira kerberos software sso tools <span itemprop="description">Integration components, mostly for Attlassian products. Claiming that these products run out-of-the-box and save 1000s of costs for individual integration.</span>Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management and cryptography. Our mission: To provide the most robust and comprehensive application security framework available while also being very easy to understand and extremely simple to use.http://incubator.apache.org/shiro/gresch2010-05-04T15:48:04+02:00apache cryptography develop framework security software sso <span itemprop="description">Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management and cryptography. Our mission: To provide the most robust and comprehensive application security framework available while also being very easy to understand and extremely simple to use.</span>In many Java EE applications declarative security is required where user and group information is stored in a database. To support this, an application server must support a security realm based on a JDBC datasource. Glassfish V2 application server also supports a configuration like this through the JDBCRealm. Unfortunately, this JDBCRealm is restrictive in various ways: * It assumes a data model where groups are modeled as value objects in the sense of Eric Evan's terminology in Domain Driven Design. Specifically, if a group should have more properties apart from its name, then this should be modeled in a different database structure with the group name as a key. * A very specific datamodel is assumed. Two tables are used: One with for every user the encoded password and another with pairs of usernames and groupnames to define to which groups a user belongs. * It is static in that it assumes that a user will always be a part of the same groups over time. After retrieving the groups for the first time, it caches them indefinitely. This makes the JDBCRealm of glassfish unsuitable for dynamic applications where users can join or leave groups. As is clear, the JDBCRealm of glassfish either fits your purpose and you are done, or it doesn't and you have to either work around it in your application or create a separate more flexible JDBC security realm yourself. Since I had a stable application that I wasn't intending on modifying, I decided to do the latter. The FlexibleJdbcRealm is a JDBC security realm which is similar to the approach used in JBoss application server. Instead of depending on a fixed database structure with only limited configuration, it is configured with two queries instead: * One query for determining the (encoded) password of the user based on the user name. * One query for determining the groups the user belongs to based on the user name. In other words, instead of assuming a certain type of data model with configuration of some column and table names and constructing the two JDBC queries for passwords and groups as JDBCRealm does, the FlexibleJDBCRealm is configured with the two queries. As a result, FlexiblJDBCRealm is more general than JDBCRealm since it can handle any datamodel that JDBCRealm can. In particular, in the application that triggered this, I had a datamodel that did not fit the one assumed by JDBCRealm. In my design I am using surrogate keys and have three tables: * a Users table with primary key, user name, encoded password, and other user attributes * a groups table with primary key, group name, and other group attributes * a user_groups table with a mapping of users to groups (based on primary key) This datamodel can easily be handled using FlexibleJdbcRealm but would have required a redesign of the application if I would have used JDBCRealm. http://flexiblejdbcrealm.wamblee.org/#overviewgresch2009-05-13T12:52:33+02:00develop glassfish java java_ee jdbc rbs real security single-sign-on software sso <span itemprop="description">In many Java EE applications declarative security is required where user and group information is stored in a database. To support this, an application server must support a security realm based on a JDBC datasource. Glassfish V2 application server also supports a configuration like this through the JDBCRealm. Unfortunately, this JDBCRealm is restrictive in various ways: * It assumes a data model where groups are modeled as value objects in the sense of Eric Evan&#039;s terminology in Domain Driven Design. Specifically, if a group should have more properties apart from its name, then this should be modeled in a different database structure with the group name as a key. * A very specific datamodel is assumed. Two tables are used: One with for every user the encoded password and another with pairs of usernames and groupnames to define to which groups a user belongs. * It is static in that it assumes that a user will always be a part of the same groups over time. After retrieving the groups for the first time, it caches them indefinitely. This makes the JDBCRealm of glassfish unsuitable for dynamic applications where users can join or leave groups. As is clear, the JDBCRealm of glassfish either fits your purpose and you are done, or it doesn&#039;t and you have to either work around it in your application or create a separate more flexible JDBC security realm yourself. Since I had a stable application that I wasn&#039;t intending on modifying, I decided to do the latter. The FlexibleJdbcRealm is a JDBC security realm which is similar to the approach used in JBoss application server. Instead of depending on a fixed database structure with only limited configuration, it is configured with two queries instead: * One query for determining the (encoded) password of the user based on the user name. * One query for determining the groups the user belongs to based on the user name. In other words, instead of assuming a certain type of data model with configuration of some column and table names and constructing the two JDBC queries for passwords and groups as JDBCRealm does, the FlexibleJDBCRealm is configured with the two queries. As a result, FlexiblJDBCRealm is more general than JDBCRealm since it can handle any datamodel that JDBCRealm can. In particular, in the application that triggered this, I had a datamodel that did not fit the one assumed by JDBCRealm. In my design I am using surrogate keys and have three tables: * a Users table with primary key, user name, encoded password, and other user attributes * a groups table with primary key, group name, and other group attributes * a user_groups table with a mapping of users to groups (based on primary key) This datamodel can easily be handled using FlexibleJdbcRealm but would have required a redesign of the application if I would have used JDBCRealm. </span>VELO is an Open Source Identity and Access Provisioning server. Features * SPML V2 compliance. new! * Role Based Access Control (RBAC) * Consolidated Employee Identity Attributes repository * Accounts Attribute Synchronization * User and Access Reconciliations * Integrated work-flow engine for complex business processes * Self Service interfaces * Support many resources * Support Complete Account Operations * Specific typed actions can be added easily * Centralized Password Policy and Password Synchronization. * Auditing & Compliance. * Powerful scripting support for complex processes via Scripting expressions * Supports more than 20 different scripting languages! new * Remote services access via Web-Services. * Extensible via Events. * Advanced Report Designer & Web-based Reporting Manager. * Pluggable Authentication Handlers. * Jboss and Glassfish Supporthttp://docs.safehaus.org/display/VELO/Homegresch2008-05-04T21:29:47+02:00admin authentication java rbs safehaus security software sso tools <span itemprop="description">VELO is an Open Source Identity and Access Provisioning server. Features * SPML V2 compliance. new! * Role Based Access Control (RBAC) * Consolidated Employee Identity Attributes repository * Accounts Attribute Synchronization * User and Access Reconciliations * Integrated work-flow engine for complex business processes * Self Service interfaces * Support many resources * Support Complete Account Operations * Specific typed actions can be added easily * Centralized Password Policy and Password Synchronization. * Auditing &amp; Compliance. * Powerful scripting support for complex processes via Scripting expressions * Supports more than 20 different scripting languages! new * Remote services access via Web-Services. * Extensible via Events. * Advanced Report Designer &amp; Web-based Reporting Manager. * Pluggable Authentication Handlers. * Jboss and Glassfish Support</span>Penrose is a java-based virtual directory server. Virtual directory enables federating (aggregating) identity data from multiple heterogeneous sources like directory, databases, flat files, and web services - real-time - and makes it available to identity consumers via LDAP. http://docs.safehaus.org/display/PENROSE/Homegresch2008-05-04T21:27:52+02:00development directory identity ldap pki safehaus security software sso <span itemprop="description">Penrose is a java-based virtual directory server. Virtual directory enables federating (aggregating) identity data from multiple heterogeneous sources like directory, databases, flat files, and web services - real-time - and makes it available to identity consumers via LDAP. </span>Coadunation is a Java based daemon server. It enables developers to quickly and easily develop daemons, web applications, distributed applications, manage distributed services etc. It provides, SSO (Single Sign On), SOA (Service Oriented Architecture), Web Services, RMI, Containers, Message Services and much more.http://www.coadunation.net/gresch2007-12-02T19:19:04+01:00computing daemon develop java server service services soa software sso sysadmin webapp <span itemprop="description">Coadunation is a Java based daemon server. It enables developers to quickly and easily develop daemons, web applications, distributed applications, manage distributed services etc. It provides, SSO (Single Sign On), SOA (Service Oriented Architecture), Web Services, RMI, Containers, Message Services and much more.</span>http://weblog.bignerdranch.com/?p=6gresch2007-07-18T20:18:23+02:00admin linux mac sso sysadmin windows <a itemprop="url" data-versiondate="2007-07-18T20:18:23+02:00" href="http://weblog.bignerdranch.com/?p=6" rel="nofollow" class="description-link">http://weblog.bignerdranch.com/?p=6</a>Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner.http://shibboleth.internet2.edu/gresch2007-07-06T13:57:46+02:00develop frameworks identity java ldap management pki security software sso <span itemprop="description">Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner.</span>