Norway's ForgeRock provides support for OpenAM, the product formerly known as
OpenSSO, and before that, Sun Access Manager.
Recently I setup interop with OpenAM using the Vordel Gateway, and here are
some screenshots of this in action.
Here is I added the connection to OpenAM under the "External Connections"
section in the Vordel Policy Studio:
In the Settings section for the Gateway, also in Policy Studio, I setup the
connection as shown below. I used a local DNS setting for "sso.example.com"
for the purposes of my setup:
I then used a HTTP Authentication filter to do authentication against OpenAM,
and then followed it with a "Create Cookie" filter which inserts the SSO
token as shown below:
Finally, here is the policy in action on the Vordel Gateway, when I test it
using the free SOAPbox testing tool. You can see the SSO token has been
injected into the response as a ... (more)
William Markito and Fabio Mazanatti from Oracle in Brazil have written a very
comprehensive guide to Oracle Enterprise Gateway integration with Oracle
Service Bus and Oracle Web Services Manager. This is definitely recommended
reading if you're planning to use these products together. William and Fabio
have put many useful screenshots in there also.
... (more)
When talking about "the cloud", it's important to differentiate between IaaS,
PaaS, and SaaS. "Cloud" can mean a lot of things. This differentiation is the
main theme of this article I've written for Computer Technology Review (CTR)
about how all cloud models are not the same, and how security applies to
each.
... (more)
I often think it's ironic that while the mission of REST is to simplify Web
development, REST itself is beset with seemingly complex jargon and
architecture patterns. I say "seemingly complex" because, once you look into
REST architecture in depth, it actually is simple. In some ways, it's almost
too simple. It's easy to rack your brains about some REST pattern, but then
realize: It's just how the Web works. I'm reminded of the line from Moliere
about the bourgeois gentleman who spends years trying to understand how he
could speak in "prose", then he exclaims "Good heavens! For m... (more)
Recently I was researching BPEL composites in the Oracle SOA Suite and I
found this excellent blog post by Shreekanta Roy Chowdhury about securing a
BPEL composite using Oracle Enterprise Gateway.
The post even provides a very useful Google doc (with screenshots!) of how to
install and configure OEG.
Highly recommended reading, if you are working with this particular set of
products.
... (more)