Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Sun releases open source ID mgmt. projects; Identicentric develops single sign-on

Catching up with recent identity management news
Security: Identity Management Alert By Dave Kearns , Network World , 08/30/2006
Kearns
Sign up for this newsletter now!

Dave Kearns provides the information you need to evaluate, install and maintain your corporate identity management system.

  • Share/Email
  • Comment
  • Print

This is another of my so-called "catch up" editions of the newsletter in which I discuss some interesting tidbits that probably don't deserve a full newsletter of their own but do deserve to be brought to your attention. There are three developments to tell you about today but since one of them has two parts, I guess we can make that four things.

The first two are both Sun: the OpenSSO project and the OpenDS project.

Launched last week, OpenSSO hopes "...to provide an extensible implementation of an identity services infrastructure that will facilitate single sign-on for Web applications hosted on Web servers and application servers."

OpenDS went public late last month and is described as "... an open source community project building a free and comprehensive next generation directory service."

OpenSSO is usable without OpenDS, but they do work together quite well. And, unlike OpenLDAP, OpenDS includes much more than just a directory server - but also other essential directory-related services like directory proxy, virtual directory, namespace distribution and data synchronization. Both have been set free in the wild after being initially developed to a usable point by Sun. They deserve a look, if only as development or learning tools.

And speaking of development/learning tools, Identicentric has just released simAXS. This is not an open source tool (it's $399/seat after a 30-day free trial) but it is very useful. As described by the company: "Identicentric's simAXS is a better way to develop single sign-on enabled applications. It simulates the HTTP header based integration method common to access management systems (like Oracle COREid Access Manager, CA eTrust Siteminder, and Sun Access Manager) and eliminates the need to install and maintain a complex security environment for day-to-day application development." Anyone who has ever tried to develop a product that needs to be able to integrate with one (or more) of a number of different products will understand the problem this solves.

The third thing I want to mention is something near and dear to my heart. As a writer, I'm fascinated with words. But I'm also a stickler on correct usage of those words. Longtime readers will know that I frequently rant about the misuse of terms by unknowing marketing people - or even those who should know better. One reader, Allan Milgate way down in Sydney, Australia, has attempted to do something to help. He's been quietly building a dictionary of identity terms which I've now been able to convince him to put online. It's a fairly comprehensive and very detailed exposition and explanation of terms that get thrown about - often very loosely - in identity management circles. I don't agree completely with all of his definitions, but it's a much better effort than any others I've seen. Give it a look when you can.

Dave Kearns is a consultant and editor of IdM, the Journal of Identity Management.

  • Share/Email
  • Comment
  • Print
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed

Whitepapers

Stock Spam: A Classic Scam

Ever since there have been stocks and shares there have been so called "pump 'n' dump" scams. This...

Spyware: Know Your Enemy

Like Macavity, the fictional feline in T. S. Eliot's well-known poem, spyware may be considered to...

The Online Shadow Economy: A Billion Dollar Market For Malware Authors

Malware, meaning computer viruses, trojans and spyware, is about money. The teenagers who wrote...

Webcasts

SQL Server Consolidation: Insights from customers, analysts & HP

Microsoft SQL Server has enjoyed phenomenal success as a database server. Its relatively low cost,...

Minimizing the Risk of Information Security Breaches: Best Practices for SOA Governance and Compliance - Live October 21

Today's enterprises face more information security risks and vulnerabilities than ever before....

Migrating to Windows Vista: Necessity and Opportunity

The Vista era of Windows is here. Yet most organizations will retain Windows XP alongside new Vista...

Special Reports

Unified Threat Management from CheckPoint

Discover why Unified Threat Management Firewalls are ready for the enterprise today. High...

The Evolution of Network Security

We have so many holes punched in our firewalls today that many industry insiders question the value...

The self-managed network

We aren't there yet, but advances in network and systems management tools are making it possible to...

Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.
Network World,to go. Wherever you are. Breaking news delivered to your mobile device. Select the hottest topics in networking and start receiving Network World on your mobile device today.