|
Archived Sun Security Articles
|
|
02 Jun 2008
|
Upcoming Sun Federated Access Manager to Feature Fedlet [20019]
Service Provider Implementation of SAML2 SSO Protocols
If you haven't heard of Fedlets, then you may want to take some time to tune in to a Sun screencast that explains just what these lightweight Service Provider implementations of SAML2 SSO protocols can do and why they will be featured in the upcoming Sun Federated Access Manager (OpenSSO) release. The Fedlets screencast covers business usage scenario, process flow and some Frequently Asked Questions.
|
|
|
02 Jun 2008
|
The Network of You [20030]
Some Suggestions from Sun's Michelle Dennedy
"The Network of You" is how Sun Chief Privacy Officer Michelle Dennedy characterizes the participatory web era. Her insights on how companies can protect assets and stakeholders through thinking more expansively about data privacy and personal information management are featured in the May 2008 Sun Inner Circle.
|
|
|
02 Jun 2008
|
The Lowdown on Virtual Federation [20053]
Provides Big Payoffs in Scalability and Ease of Deployment
Rajeev Angal, inventor of virtual federation and a major player in the development of the free and open-source Sun Federated Access Manager, sat down with Marina Sum for an interview on virtual federation in which he discussed the definition, the problems encountered and solved, the process and, not least, the benefits.
|
|
|
28 Apr 2008
|
Daniel Raskin Outlines Sun's Current Goals in Federation, Access Management [19792]
Simplification Is a Major Factor
The simplification of federation and identity management tasks for enterprises is one of the chief goals of Daniel Raskin, senior product line manager for Access and Federation Management at Sun, who explains his aims and discusses some of the key features of the soon-to-be-released Sun Federated Access Manager in an interview with Marina Sum.
|
|
|
28 Apr 2008
|
User Attributes in Securing Applications with Identity Services [19810]
Demonstrates How to Fetch User Attributes With Attribute Service
In Part 3 of their series on Securing Applications With Identity Services, Lakshman Abburi, Aravindan Ranganathan and Marina Sum turn their attention to User Attributes. The authors describe how to fetch user attributes by means of the attribute service with IdSvcsClient, an example application built with the NetBeans IDE.
|
|
|
28 Apr 2008
|
Sun Managed Operations for Identity [19814]
Provides 24x365 Remote Management & Monitoring of Sun ID Management
The Sun Managed Operations for Identity released in mid-April offers customers Managed Operations Remote Monitoring and Management of Sun Identity Management (IDM) solutions. This solution is an added capability to the existing Sun Managed Operations offering.
|
|
|
28 Apr 2008
|
Using the Solaris Security Toolkit to Harden Your System [19828]
Brief Tutorial Explains the Process to Secure Systems
Deploy a baseline of security configurations to all your systems with the Solaris Security Toolkit (SST), formerly known as the JumpStart Architecture and Security Scripts (JASS) toolkit. In a brief tutorial by Joerg Moellenkamp, learn how to install the SST and use it to harden a system.
|
|
|
31 Mar 2008
|
Security Is More than Just an Afterthought [19682]
Sun's Jamie Nelson on Federated Identity Management
When Marina Sum interviewed Sun's Director of Engineering for Access and Federation Management Jamie Nelson, one of his most striking observations was that "...in developing Web applications...identity is often an afterthought." Worse yet, he added, too often, the security portion of an application is typically built in a rush, sometimes with boilerplate community code. The implications for single sign-on (SSO) in such a case are not good, he said.
|
|
|
31 Mar 2008
|
What Are the Top Five Threats to the Security of Web 2.0 Operations? [19703]
A List from Glenn Brunette and Rafat Alvi
Sun Distinguished Engineer Glenn Brunette and Principal Engineer Rafat Alvi, members of the Sun Inner Circle, shared their views on the security threats to success in web scale enterprises, examining the subject of asset protection as connectivity expands geometrically. According to Brunette, "because Web scale deployments reach so many people through constantly evolving delivery methods, long-standing security matters can take on new dimensions.”
|
|
|
31 Mar 2008
|
Adapting Sun's Culture to the Realities of the Open Source Community [19708]
Pat Patterson on OpenSSO
Pat Patterson, a member of Sun's access and federation management team and community manager for Open SSO, identified the transition from traditional proprietary development to open source as the biggest challenge OpenSSO faces, as he answered questions put to him by Marina Sum. This situation is caused by the need for Sun engineers to be "up front" in their work, out in the open, so to speak, working within the community of outside contributors and with their colleagues at Sun as well.
|
|
