Open Source SSO is project that provides the core identity services to simplify and implement a transparent single sign-on (SSO) as a security component in a network infrastructure. OpenSSO provides the basis for integrating diverse web applications that might typically operate independently with a disparate set of identity parameters which and are hosted on a variety of platforms such as web and application servers.
This project is based on the code base of Sun Java System Access Manager which was developed by Sun Microsystems.
Glassfish is Open SSO’s preferred deployment container The general idea os the SSO is to provide an tiered relationship between the different functions and applications acrros an enterprise network. The tiered relationship bascialy creates separate and isolated functional areas.
In a typical arrangement, multi-tiered application have a client tier, a middle tier, and a data tier (or enterprise tier). The client tier consists of a client tier which makes requests to the middle tier. The middle tier’s comprises of the business functions which handle client requests and process application data, and then storing it in a permanent datastore in the data tier.
This means that the middle tier holds the business logic of the application and provides the framework for conversations with the client. From a users perspective this is comprised if the web tier which handles the interaction between the client (e.g. the individual workstation) and the business tier (the business application itself) which collects input from the client, generates content, controls the flow of the screen or pages (the application flow), maintains the user session, and performs basic logic to hold data temporarily, and then forwards the completed data to the enterprise tier for permanant storage of information for use by other systems.
Specifically, the WinSSO plugin had a few problems with the interceptor implementation as it would also only allow SSO when a user was in the KnowledgeTree database and it did not work for Kerberos authentication. … Every open source project lives mainly from its community. With a thriving community OSS projects will undoubtedly succeed. It is imperative that everyone that uses and enjoys KnowledgeTree contribute their ideas, bug fixes, documentation, translations, etc.
Our Open Source Programs Office sponsored the work and the result is an Open Source single sign-on integration between Moodle and Google. The best part is the extensibility features allow any educational software vendor to take a similar approach to provide user directory synchronization, single sign-on, and user data integration.
Written for anyone interested in understanding how secure Internet SSO works, this white paper explores the limitations of current SSO implementations outside of a single security domain (including identity and access management systems and open source development) and introduces standalone secure Internet SSO as a solution.