Valtira has the released Rolecall 1.1. Rolecall is an identity management framework that provides Single Sign-On (SSO) support to both J2EE and .NET applications. New features are aimed at service provider integration with frameworks such as JAAS and OSUser.

Features

Rolecall provides single sign-on capabilities to environments with multiple web applications so that users need to login just once to access all your web applications. You can even configure Rolecall to use your existing Active Directory, Novell NDS, LDAP server or custom user store so that your web applications share login credentials with your existing security infrastructure.

* Group based Principal and Application management.
* External Principal and Group management support.
* Clean, powerful and easy-to-use web-based interface for user account and access administration.
* Email notifications to users of account changes.
* Supports application-layer security restrictions for Principal management.
* Pre-built J2EE integration libraries.
* Supports most relational database engines, including Oracle, MySQL, MS SQL, and PostgreSQL.
* Simple installation on any J2EE application server or standalone distributions (Orion and Tomcat).

Licensing

* 3 applications - $300 - ($90 per additional application)
* unlimited applications - $1,000
* source code (includes unlimited applications) - $3,500

Online Download

Rolecall is available for download in two different formats, standalone and a WAR distribution. We recommend you download the Standalone version for evaluation purposes, this version will allow you to get up and running with the least amount of effort.

You can download Rolecall at http://www.valtira.com/page/rolecall.jsp.

Free Licenses to Open Source Projects

Are you working on software released under an Open Source License?

If so, Valtira has license options for your project support needs. Do you need a single sign-on solution to integrate all of your project management tools like Jive, Confluence, and JIRA? Use Rolecall free of cost for your project.

Requirements for our licenses for Open Source projects are:

* Our software must be supporting your Open Source efforts and not unrelated commercial efforts. You can be a commercial entity, but you require a different license to support your commercial needs.
* Open Source efforts are considered projects releasing their software under a commonly accepted Open Source license.

I'd love to find a product that integrates single sign on for php applications like phpbb2 and custom developed applications written in Java.

I'd love to find a product that integrates single sign on for php applications like phpbb2 and custom developed applications written in Java.

You can do that with Tivoli Access Manager, although it's hella expensive :) Technically for anything that doesn't support LTPA (ie. Websphere or Domino) you're just trusting the authenticated credentials the reverse-proxy passes you in the headers.

Rolecall can support any web application. It has a web services based API for authenticating users and managing SSO credentials. So, yes, it can support PHP apps..

Justen,

How does this integrate into JAAS, i.e. if I'm in a session been can I just call the getPrincipal() method to see who is calling the method or do I have to call directly into your services ?

Thanks

Ian Purton
Website and Server Monitoring | Email Marketing | Website Traffic Analysis | Top 100 Album Charts

Justen,How does this integrate into JAAS, i.e. if I'm in a session been can I just call the getPrincipal() method to see who is calling the method or do I have to call directly into your services ?ThanksIan PurtonWebsite and Server Monitoring | Email Marketing | Website Traffic Analysis | Top 100 Album Charts

JAAS is not an identity management system. You cannot use it to find out info about the users. While getPrincipal() can be used to get some rudimentary user info, JAAS is really only useful for applications that want to ask "is this user a valid user?" and "can this user perform that action"? And JAAS is not even really good at asking the latter (since you cannot access independent of actually attempting to perform the action in question.