- Microsoft lays out SQL Server road map
- Credit card skimming
- Nortel's stock market capitalization plummets
- The Obama campaign's Search Engine to Nowhere
- Will Apple be forced to make more money?
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:Application Performance Solutions | App Performance | Networking Solution | SafeGuard Enterprise Solution Center | SOA | Test your Web Filter | Value of WDS
Dave Kearns provides the information you need to evaluate, install and maintain your corporate identity management system.
This is another of my so-called "catch up" editions of the newsletter in which I discuss some interesting tidbits that probably don't deserve a full newsletter of their own but do deserve to be brought to your attention. There are three developments to tell you about today but since one of them has two parts, I guess we can make that four things.
The first two are both Sun: the OpenSSO project and the OpenDS project.
Launched last week, OpenSSO hopes "...to provide an extensible implementation of an identity services infrastructure that will facilitate single sign-on for Web applications hosted on Web servers and application servers."
OpenDS went public late last month and is described as "... an open source community project building a free and comprehensive next generation directory service."
OpenSSO is usable without OpenDS, but they do work together quite well. And, unlike OpenLDAP, OpenDS includes much more than just a directory server - but also other essential directory-related services like directory proxy, virtual directory, namespace distribution and data synchronization. Both have been set free in the wild after being initially developed to a usable point by Sun. They deserve a look, if only as development or learning tools.
And speaking of development/learning tools, Identicentric has just released simAXS. This is not an open source tool (it's $399/seat after a 30-day free trial) but it is very useful. As described by the company: "Identicentric's simAXS is a better way to develop single sign-on enabled applications. It simulates the HTTP header based integration method common to access management systems (like Oracle COREid Access Manager, CA eTrust Siteminder, and Sun Access Manager) and eliminates the need to install and maintain a complex security environment for day-to-day application development." Anyone who has ever tried to develop a product that needs to be able to integrate with one (or more) of a number of different products will understand the problem this solves.
The third thing I want to mention is something near and dear to my heart. As a writer, I'm fascinated with words. But I'm also a stickler on correct usage of those words. Longtime readers will know that I frequently rant about the misuse of terms by unknowing marketing people - or even those who should know better. One reader, Allan Milgate way down in Sydney, Australia, has attempted to do something to help. He's been quietly building a dictionary of identity terms which I've now been able to convince him to put online. It's a fairly comprehensive and very detailed exposition and explanation of terms that get thrown about - often very loosely - in identity management circles. I don't agree completely with all of his definitions, but it's a much better effort than any others I've seen. Give it a look when you can.
Dave Kearns is a consultant and editor of IdM, the Journal of Identity Management.

Ever since there have been stocks and shares there have been so called "pump 'n' dump" scams. This...
Spyware: Know Your EnemyLike Macavity, the fictional feline in T. S. Eliot's well-known poem, spyware may be considered to...
The Online Shadow Economy: A Billion Dollar Market For Malware AuthorsMalware, meaning computer viruses, trojans and spyware, is about money. The teenagers who wrote...

Microsoft SQL Server has enjoyed phenomenal success as a database server. Its relatively low cost,...
Minimizing the Risk of Information Security Breaches: Best Practices for SOA Governance and Compliance - Live October 21Today's enterprises face more information security risks and vulnerabilities than ever before....
Migrating to Windows Vista: Necessity and OpportunityThe Vista era of Windows is here. Yet most organizations will retain Windows XP alongside new Vista...

Discover why Unified Threat Management Firewalls are ready for the enterprise today. High...
The Evolution of Network SecurityWe have so many holes punched in our firewalls today that many industry insiders question the value...
The self-managed networkWe aren't there yet, but advances in network and systems management tools are making it possible to...
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment