System News
Troubleshooting OpenSSO with Firefox Add-Ons
How to Analyze and Troubleshoot OpenSSO Deployments
November 11, 2009,
Volume 141, Issue 2

gain insight into OpenSSO interactions and better understand how the system works
 

A five-part Sun Developer Network article series by Jim Faut, along with contributions from Rick Palkovic, explains how to analyze and troubleshoot OpenSSO deployments with the Mozilla Firefox web browser. The series begins with an introduction and configuration description, followed by OpenSSO deployment examples.

Before engaging in these readings, one should have already configured an OpenSSO deployment and used the default OpenSSO configuration. The article also assumes that you have configured a policy agent on a web server to demonstrate the way it interacts with the OpenSSO server.

Part 1: Introduction

This first article provides configuration values of the OpenSSO server and policy agent host. Two Firefox browser add-ons - Live HTTP Headers and HackBar - are demonstrated, each of which facilitate troubleshooting of a typical OpenSSO deployment. Examples in the article were developed with Firefox 3.0.6, although the authors note that Firefox 2.x works similarly.

Part 2: Single Sign-On and Policy Protection

An OpenSSO deployment designed for simple single sign-on and policy protection are explored. The article shows how inspecting the traffic flowing through a browser can provide valuable insight into the transactions that comprise an OpenSSO solution. Using Firefox, combined with the Live HTTP Headers and HackBar Add-ons, are even more valuable in an environment that has the OpenSSO and policy agent applications protected with SSL encryption because it is impossible to "snoop" the traffic on the network. These tools expose the data in its unencrypted form so that this type of troubleshooting is possible.

Part 3: Cross-Domain Single Sign-On

This example shows how enabling the Cross-Domain Single Sign-On feature increases the amount of traffic passed through the user's browser. Although this data can seem overwhelming at first, the HackBar Add-on helps decode the data to understand the interaction between the policy agent and the OpenSSO server.

Part 4: Service Provider Initiated Fedlet Single Sign-On

This example explains how the Fedlet can be deployed to easily integrate Service Provider Initiated Single Sign-On. The article shows the detailed interaction between the user's browser, the Fedlet and OpenSSO.

Part 5: Identity Provider Initiated Fedlet Single Sign-On

This example shows how the Fedlet can be deployed to easily integrate Identity Provider Initiated Single Sign-On.

More Information

OpenSSO Project

OpenSSO Enterprise Product Page

Sun OpenSSO Enterprise Support and Services

OpenSSO Resource Center Wiki [...read more...]

Keywords:

fullsource
 

Other articles in the Security section of Volume 141, Issue 2:

See all archived articles in the Security section.

Jobs powered by Personforce



Customized news reports about Oracle's Sun hardware products.
Just the news you need, none of what you don't.
45,000+ Members. 20,000+ Articles Published since 1998.