<?xml version="1.0" encoding="UTF-8"?>











<rss version="2.0" xmlns:jf="http://www.jivesoftware.com/xmlns/jiveforums/rss">



<channel>
    <title>Support Forums: Message List - Article: SSO and Identity Management</title>
    <link>http://www.theserverside.com</link>
    <description>Most recent forum messages</description>
    <language>en</language>
    
        <generator>Jive Forums Silver 5.5.30 (www.jivesoftware.com)</generator>
    
    <pubDate>Thu, 20 Jun 2013 02:57:49 -0400</pubDate>


    <item>

        <title>don't forget about SAML</title>
        <link>http://www.theserverside.com/discussions/thread.tss?thread_id=37980</link>

        

        
            <description><![CDATA[I was surprised to find no mention of SAML (<a href="http://www.oasis-open.org/specs/index.php#samlv2.0" target="_blank">http://www.oasis-open.org/specs/index.php#samlv2.0</a>) in this article. This technology is used today for the cross-domain SSO. It...]]></description>
        

        <pubDate>Thu, 15 Dec 2005 13:02:55 -0500</pubDate>

        

        <jf:creationDate>Thu, 15 Dec 2005 13:02:55 -0500</jf:creationDate>
        <jf:modificationDate>Thu, 15 Dec 2005 13:02:55 -0500</jf:modificationDate>
        <jf:date>Dec 15, 2005</jf:date>
        <jf:author>Victor Okunev</jf:author>
        <jf:replyCount>0</jf:replyCount>
    </item>


    <item>

        <title>jaas is not enterprise, active directory has no external users</title>
        <link>http://www.theserverside.com/discussions/thread.tss?thread_id=37980</link>

        

        
            <description><![CDATA[Hi all!<br><br>I believe that most big international companies cannot afford to put external users in their active directory deployment.<br><br>Let's say a company has around 50000 internal users, and 500000 registered partners, customers, and just...]]></description>
        

        <pubDate>Sun, 11 Dec 2005 14:29:17 -0500</pubDate>

        

        <jf:creationDate>Sun, 11 Dec 2005 14:29:17 -0500</jf:creationDate>
        <jf:modificationDate>Sun, 11 Dec 2005 14:29:17 -0500</jf:modificationDate>
        <jf:date>Dec 11, 2005</jf:date>
        <jf:author>David Abramowicz</jf:author>
        <jf:replyCount>0</jf:replyCount>
    </item>


    <item>

        <title>Certificates and Load balancers</title>
        <link>http://www.theserverside.com/discussions/thread.tss?thread_id=37980</link>

        

        
            <description><![CDATA[<blockquote><blockquote>In a minimal B2B environment where you have a small number of partners, client SSL certs might be workable, if the app server layer ever sees the cert (I agree that this is a problem in the case where you've deployed SSL...]]></description>
        

        <pubDate>Sun, 11 Dec 2005 12:28:24 -0500</pubDate>

        

        <jf:creationDate>Sun, 11 Dec 2005 12:28:24 -0500</jf:creationDate>
        <jf:modificationDate>Sun, 11 Dec 2005 12:28:24 -0500</jf:modificationDate>
        <jf:date>Dec 11, 2005</jf:date>
        <jf:author>Srikanth Shenoy</jf:author>
        <jf:replyCount>0</jf:replyCount>
    </item>


    <item>

        <title>Certificates and Load balancers</title>
        <link>http://www.theserverside.com/discussions/thread.tss?thread_id=37980</link>

        

        
            <description><![CDATA[<blockquote>In a minimal B2B environment where you have a small number of partners, client SSL certs might be workable, if the app server layer ever sees the cert (I agree that this is a problem in the case where you've deployed SSL acceleration, a...]]></description>
        

        <pubDate>Sun, 11 Dec 2005 03:56:36 -0500</pubDate>

        

        <jf:creationDate>Sun, 11 Dec 2005 03:56:36 -0500</jf:creationDate>
        <jf:modificationDate>Sun, 11 Dec 2005 03:56:36 -0500</jf:modificationDate>
        <jf:date>Dec 11, 2005</jf:date>
        <jf:author>Rickard Oberg</jf:author>
        <jf:replyCount>1</jf:replyCount>
    </item>


    <item>

        <title>Certificates and Load balancers</title>
        <link>http://www.theserverside.com/discussions/thread.tss?thread_id=37980</link>

        

        
            <description><![CDATA[In a minimal B2B environment where you have a small number of partners, client SSL certs might be workable, if the app server layer ever sees the cert (I agree that this is a problem in the case where you've deployed SSL acceleration, a problem I don't...]]></description>
        

        <pubDate>Sun, 11 Dec 2005 02:42:49 -0500</pubDate>

        

        <jf:creationDate>Sun, 11 Dec 2005 02:42:49 -0500</jf:creationDate>
        <jf:modificationDate>Sun, 11 Dec 2005 02:42:49 -0500</jf:modificationDate>
        <jf:date>Dec 11, 2005</jf:date>
        <jf:author>James Waldrop</jf:author>
        <jf:replyCount>2</jf:replyCount>
    </item>


    <item>

        <title>Certificates and Load balancers</title>
        <link>http://www.theserverside.com/discussions/thread.tss?thread_id=37980</link>

        

        
            <description><![CDATA[<blockquote>Would client certificates and SSL (HTTPS) work here? For intranet users simply install them into the browser, and for external users they can use either installed certificates (if they own the computer) or use USB dongles with certificates,...]]></description>
        

        <pubDate>Sat, 10 Dec 2005 14:26:39 -0500</pubDate>

        

        <jf:creationDate>Sat, 10 Dec 2005 14:26:39 -0500</jf:creationDate>
        <jf:modificationDate>Sat, 10 Dec 2005 14:26:39 -0500</jf:modificationDate>
        <jf:date>Dec 10, 2005</jf:date>
        <jf:author>Srikanth Shenoy</jf:author>
        <jf:replyCount>3</jf:replyCount>
    </item>


    <item>

        <title>AD, Kerberos, B2B SOA and SSO - Its getting complicated</title>
        <link>http://www.theserverside.com/discussions/thread.tss?thread_id=37980</link>

        

        
            <description><![CDATA[<blockquote>Purely within the company, Kerberos in general and ActiveDirectory in specific is fine for SSO. I would even go so far as to say that it's the best solution I know of for SSO, and that includes things like logging into Unix workstations. You...]]></description>
        

        <pubDate>Sat, 10 Dec 2005 14:19:17 -0500</pubDate>

        

        <jf:creationDate>Sat, 10 Dec 2005 14:19:17 -0500</jf:creationDate>
        <jf:modificationDate>Sat, 10 Dec 2005 14:19:17 -0500</jf:modificationDate>
        <jf:date>Dec 10, 2005</jf:date>
        <jf:author>Srikanth Shenoy</jf:author>
        <jf:replyCount>0</jf:replyCount>
    </item>


    <item>

        <title>Kerberos and J2EE - Let's give it a push</title>
        <link>http://www.theserverside.com/discussions/thread.tss?thread_id=37980</link>

        

        
            <description><![CDATA[<blockquote><blockquote>Purely within the company, Kerberos in general and ActiveDirectory in specific is fine for SSO. I would even go so far as to say that it's the best solution I know of for SSO, and that includes things like logging into Unix...]]></description>
        

        <pubDate>Sat, 10 Dec 2005 11:32:41 -0500</pubDate>

        

        <jf:creationDate>Sat, 10 Dec 2005 11:32:41 -0500</jf:creationDate>
        <jf:modificationDate>Sat, 10 Dec 2005 11:32:41 -0500</jf:modificationDate>
        <jf:date>Dec 10, 2005</jf:date>
        <jf:author>Justen Stepka</jf:author>
        <jf:replyCount>0</jf:replyCount>
    </item>


    <item>

        <title>Kerberos and J2EE - Let's give it a push</title>
        <link>http://www.theserverside.com/discussions/thread.tss?thread_id=37980</link>

        

        
            <description><![CDATA[<blockquote>Purely within the company, Kerberos in general and ActiveDirectory in specific is fine for SSO. I would even go so far as to say that it's the best solution I know of for SSO, and that includes things like logging into Unix workstations. You...]]></description>
        

        <pubDate>Sat, 10 Dec 2005 03:01:08 -0500</pubDate>

        

        <jf:creationDate>Sat, 10 Dec 2005 03:01:08 -0500</jf:creationDate>
        <jf:modificationDate>Sat, 10 Dec 2005 03:01:08 -0500</jf:modificationDate>
        <jf:date>Dec 10, 2005</jf:date>
        <jf:author>Rickard Oberg</jf:author>
        <jf:replyCount>6</jf:replyCount>
    </item>


    <item>

        <title>Kerberos and J2EE - Let's give it a push</title>
        <link>http://www.theserverside.com/discussions/thread.tss?thread_id=37980</link>

        

        
            <description><![CDATA[Purely within the company, Kerberos in general and ActiveDirectory in specific is fine for SSO. I would even go so far as to say that it's the best solution I know of for SSO, and that includes things like logging into Unix workstations. You can...]]></description>
        

        <pubDate>Fri, 09 Dec 2005 18:13:02 -0500</pubDate>

        

        <jf:creationDate>Fri, 09 Dec 2005 18:13:02 -0500</jf:creationDate>
        <jf:modificationDate>Fri, 09 Dec 2005 18:13:02 -0500</jf:modificationDate>
        <jf:date>Dec 9, 2005</jf:date>
        <jf:author>James Waldrop</jf:author>
        <jf:replyCount>7</jf:replyCount>
    </item>


    <item>

        <title>Kerberos and J2EE - Let's give it a push</title>
        <link>http://www.theserverside.com/discussions/thread.tss?thread_id=37980</link>

        

        
            <description><![CDATA[Clearly you know a lot more about Kerberos than me :o)<br><br>Some time ago I made a small trip into the sys admin area, trying to create a Linux server that could handle our small Linux based development office. One of may main objectives was to have...]]></description>
        

        <pubDate>Fri, 09 Dec 2005 17:52:06 -0500</pubDate>

        

        <jf:creationDate>Fri, 09 Dec 2005 17:52:06 -0500</jf:creationDate>
        <jf:modificationDate>Fri, 09 Dec 2005 17:52:06 -0500</jf:modificationDate>
        <jf:date>Dec 9, 2005</jf:date>
        <jf:author>Jose Gonzalez Gomez</jf:author>
        <jf:replyCount>8</jf:replyCount>
    </item>


    <item>

        <title>Kerberos really sufficient?</title>
        <link>http://www.theserverside.com/discussions/thread.tss?thread_id=37980</link>

        

        
            <description><![CDATA[I don't see how Kerberos can be used in the following scenario:<br><br>Imagine a company with a portal that customers have access to. The company purchases 3rd party software which is also web-based, running on separate systems (either on-premise or off,...]]></description>
        

        <pubDate>Fri, 09 Dec 2005 17:48:27 -0500</pubDate>

        

        <jf:creationDate>Fri, 09 Dec 2005 17:48:27 -0500</jf:creationDate>
        <jf:modificationDate>Fri, 09 Dec 2005 17:48:27 -0500</jf:modificationDate>
        <jf:date>Dec 9, 2005</jf:date>
        <jf:author>James Waldrop</jf:author>
        <jf:replyCount>0</jf:replyCount>
    </item>


    <item>

        <title>Good thing: Taking the initiative to write an article.</title>
        <link>http://www.theserverside.com/discussions/thread.tss?thread_id=37980</link>

        

        
            <description><![CDATA[<i>A white name does not have to do with anything. Period.</i><br><br>Repeat one hundred times. Say again -<br><i>A white name does not have to do with anything. Period.</i><br><br>That's better than a question and the confusion in your mind,...]]></description>
        

        <pubDate>Fri, 09 Dec 2005 16:03:47 -0500</pubDate>

        

        <jf:creationDate>Fri, 09 Dec 2005 16:03:47 -0500</jf:creationDate>
        <jf:modificationDate>Fri, 09 Dec 2005 16:03:47 -0500</jf:modificationDate>
        <jf:date>Dec 9, 2005</jf:date>
        <jf:author>Sujan J20</jf:author>
        <jf:replyCount>1</jf:replyCount>
    </item>


    <item>

        <title>Good thing: Taking the initiative to write an article.</title>
        <link>http://www.theserverside.com/discussions/thread.tss?thread_id=37980</link>

        

        
            <description><![CDATA[<blockquote>What does a white name have to do with anything?</blockquote>Do not pose <b>a question like the one you did</b>. Instead, we prefer you say the following in a simple positive no-nonsense sentence:<br><br><i>A white name does not have to do...]]></description>
        

        <pubDate>Fri, 09 Dec 2005 15:59:12 -0500</pubDate>

        

        <jf:creationDate>Fri, 09 Dec 2005 15:59:12 -0500</jf:creationDate>
        <jf:modificationDate>Fri, 09 Dec 2005 15:59:12 -0500</jf:modificationDate>
        <jf:date>Dec 9, 2005</jf:date>
        <jf:author>Sujan J20</jf:author>
        <jf:replyCount>2</jf:replyCount>
    </item>


    <item>

        <title>Good thing: Taking the initiative to write an article.</title>
        <link>http://www.theserverside.com/discussions/thread.tss?thread_id=37980</link>

        

        
            <description><![CDATA[<blockquote>Hi Srikanth Shenoy</blockquote>Plus, your name is 'Shenoy' - that name is not a white name.</blockquote><br>I'm confused.  What does a white name have to do with anything?]]></description>
        

        <pubDate>Fri, 09 Dec 2005 15:53:05 -0500</pubDate>

        

        <jf:creationDate>Fri, 09 Dec 2005 15:53:05 -0500</jf:creationDate>
        <jf:modificationDate>Fri, 09 Dec 2005 15:53:05 -0500</jf:modificationDate>
        <jf:date>Dec 9, 2005</jf:date>
        <jf:author>Chris Perrin</jf:author>
        <jf:replyCount>3</jf:replyCount>
    </item>



</channel>
</rss>

