Sun announced the availability of a new, fine-grained entitlement enforcement engine as part of OpenSSO Express 9, and a next-generation directory proxy server as part of Sun OpenDS Standard Edition 2.2.

The entitlement enforcement engine was designed to support enterprise deployments and provide mass-scale extranet deployments with a complete off the shelf, standards-based solution that can externalize authorization for more than 100 million users. With this new feature, OpenSSO Express 9 becomes the only access management solution to provide access management, federation, secure web services, multi-factor authentication and fine-grained entitlement enforcement in a single product.

Kuppinger Cole Senior Analyst Felix Gaehtgens commented, "We are particularly encouraged to see Sun's new fine-grained authorization solution in OpenSSO. Other vendor offerings are typically offered as a standalone products and do not integrate easily with web access management. Sun now stands out as the only vendor to now offer a consolidated platform that provides web access management, federation, secure web services, and fine-grained entitlement enforcement in a single application."

The new directory proxy server makes it even easier for customers to proactively maintain up-time as activity increases with a "global index" to help easily distribute and balance loads - based on factors such as any identity attribute or based on a traffic distribution algorithms. The next-generation directory proxy server can help customers easily and effectively meet variable demand events, such as adding additional capacity during the holiday season, or distribute load based on regional demand to accommodate increases in authentication. The new and improved installer provides user experience improvements that can install, configure and deploy either a core directory server or directory proxy in six clicks or less.

Gaehtgens noted, "Also, in the latest OpenDS release, Sun has finally added LDAP proxy features that focus on integrating identities from multiple sources - making it easier for enterprises to deploy next generation directory services."

With these two end-of-the-year announcements, Sun states that it has completed its identity management portfolio update for 2009. Over the past year, Sun has released the following products as part of this portfolio:

• Sun Identity Manager 8.1: Updates included: External Resource Management, Identity Connectors and Better Integration of Business Roles

• Sun Role Manager 5: Updates included: 360 Degree View of Assigned Access, Closed-loop Remediation and Rule Life-cycle Management

• OpenSSO Express 7, 8 and 9: Updates included: Fine-Grained Entitlement Enforcement, One Time Password for Mobile Phones, Out-of-Box Federation Support for Google Apps, Salesforce.com and Web-Ex and a Fedlet for .NET

• Sun Directory Server Enterprise Edition 7: Updates included: Performance Enhancements by more than 3x the current version, Hardware Optimization with up to 60% improvement in authentications and modifications and 5x performance improvement in data import times and a New Single License for Directory Server, Virtual Directory, Proxy Server, Web Console and Active Directory Synchronization Tool-Kit

• Sun OpenDS Standard Edition 2.2: Includes the following new features: Fractional Replication, Extensible Matching Rules for Time Base Attributes, Assured Replication and Ease-of- Use-Improvements including: Default Automatic Back-Up and Remote Server Management in the Control Panel and Next Generation Directory Proxy

"With the release of Sun's fine-grained entitlement enforcement engine and next-generation directory proxy server," confirmed Daniel Raskin, Sun chief identity strategist, "Sun has completed its 2009 portfolio update and has added a high-scaling, standards-based entitlement enforcement solution and a next generation proxy server to our arsenal of capabilities."

More Information

OpenSSO Resource Center

Sun OpenSSO Documentation

Sun Identity Management [...read more...]

		fullsource
Print Email Current Profile Archive Blog Generate newsletter