Fast and Free SSO: A Survey of Open-Source Solutions to Single Sign-On

Fast and Free SSO: A Survey of Open-Source Solutions to Single Sign-OnCraig Dickson, Software Engineering ManagerNaveen Nal annagari, Senior ConsultantBehr Process Corporationwww.behr.comTS-46042007 JavaOneSM Conference | Session TS-4604 | Goals of This PresentationA survey of Open-Source Solutions to Single Sign-OnPresent a sample of the different open source-based SSO solutions, critically compare and contrast them and provide tips on how to choose the right one to fit your needs.2007 JavaOneSM Conference | Session TS-4604 | 2AgendaWhat Is SSO? (Briefly)Survey of the Main Open Source PlayersHead-to-Head ComparisonsSummaryQ&A2007 JavaOneSM Conference | Session TS-4604 | 3AgendaWhat Is SSO? (Briefly)Survey of the Main Open Source PlayersHead-to-Head ComparisonsSummaryQ&A2007 JavaOneSM Conference | Session TS-4604 | 4What Is SSO?It is definitely not…“Every Single time you want to do something, you are going to have to Sign-On!”—Your Sys Admin2007 JavaOneSM Conference | Session TS-4604 | 5What Is SSO?This is more like it…• Authenticate only once and access multiple resources• Improved user productivity • Improved developer productivity• Ease of administration2007 JavaOneSM Conference | Session TS-4604 | 6What Is SSO?But what about the downsides…• Potential y creates a single point of attack• Malicious types only need 1 set of credentials and they can do a lot of damage• Can be very difficult to retrofit existing applications and infrastructure with an SSO solution2007 JavaOneSM Conference | Session TS-4604 | 7AgendaWhat Is SSO? (Briefly)Survey of the Main Open Source PlayersHead-to-Head ComparisonsSummaryQ&A2007 JavaOneSM Conference | Session TS-4604 | 8OpenSSOOpen Web SSO• Mission of OpenSSOTo provide an extensible implementation of identity services infrastructure that will facilitate Single Sign-On for web applications• From the java.net community• Focused on web-based single sign-on• A common starting point for many identity management projects2007 JavaOneSM Conference | Session TS-4604 | 9OpenSSOContinued…• Sun wil make the fol owing Sun Java™ System Access Manager modules freely available as part of OpenSSO • Authentication • Single-domain SSO • Web and Java 2 Platform, Enterprise Edition (J2EE™ platform) agents • Session management • Policy • Console • Administration tools • Federation • Policy agents2007 JavaOneSM Conference | Session TS-4604 | 10