Atlassian Software Systems today announced the general availability of Crowd 1.0, a single sign-on application for helping manage authentication and authorisation for multiple...]]> Thu, 15 Mar 2007 23:16:33 -0400 Thu, 15 Mar 2007 23:16:33 -0400 Thu, 15 Mar 2007 23:16:33 -0400 Mar 15, 2007 Justen Stepka 0 http://www.theserverside.com/discussions/thread.tss?thread_id=44530 Before few days.. i was searching for an opensource SSO solution,
I have tried many
(JOSSO,JAAS wid Kerberos, spnego, OpenSSO, Yale CAS)
but most of them have some limitations..
As I need to support User profiles stored in RDBMS...]]> Thu, 15 Mar 2007 23:12:27 -0400 Thu, 15 Mar 2007 23:12:27 -0400 Thu, 15 Mar 2007 23:12:27 -0400 Mar 15, 2007 Justen Stepka 0 http://www.theserverside.com/discussions/thread.tss?thread_id=44530 Sat, 10 Mar 2007 20:24:45 -0500 Sat, 10 Mar 2007 20:24:45 -0500 Sat, 10 Mar 2007 20:24:45 -0500 Mar 10, 2007 Suneet Shah 0 http://www.theserverside.com/discussions/thread.tss?thread_id=44530 Sat, 10 Mar 2007 08:35:06 -0500 Sat, 10 Mar 2007 08:35:06 -0500 Sat, 10 Mar 2007 08:35:06 -0500 Mar 10, 2007 ohIDidntKnowThat ohIDidntKnowThat 1 http://www.theserverside.com/discussions/thread.tss?thread_id=44530 Sat, 10 Mar 2007 07:58:23 -0500 Sat, 10 Mar 2007 07:58:23 -0500 Sat, 10 Mar 2007 07:58:23 -0500 Mar 10, 2007 Remi Vankeisbelck 0 http://www.theserverside.com/discussions/thread.tss?thread_id=44530 Sat, 10 Mar 2007 07:34:21 -0500 Sat, 10 Mar 2007 07:34:21 -0500 Sat, 10 Mar 2007 07:34:21 -0500 Mar 10, 2007 Remi Vankeisbelck 0 http://www.theserverside.com/discussions/thread.tss?thread_id=44530 Fri, 09 Mar 2007 13:08:25 -0500 Fri, 09 Mar 2007 13:08:25 -0500 Fri, 09 Mar 2007 13:08:25 -0500 Mar 9, 2007 Suneet Shah 1 http://www.theserverside.com/discussions/thread.tss?thread_id=44530 Fri, 09 Mar 2007 08:51:31 -0500 Fri, 09 Mar 2007 08:51:31 -0500 Fri, 09 Mar 2007 08:51:31 -0500 Mar 9, 2007 daringtakers 1 http://www.theserverside.com/discussions/thread.tss?thread_id=44530 Fri, 09 Mar 2007 08:50:41 -0500 Fri, 09 Mar 2007 08:50:41 -0500 Fri, 09 Mar 2007 08:50:41 -0500 Mar 9, 2007 daringtakers 0 http://www.theserverside.com/discussions/thread.tss?thread_id=44530 Thu, 08 Mar 2007 11:10:07 -0500 Thu, 08 Mar 2007 11:10:07 -0500 Thu, 08 Mar 2007 11:10:07 -0500 Mar 8, 2007 Remi Vankeisbelck 2 http://www.theserverside.com/discussions/thread.tss?thread_id=44530 My experience is that the main feature they provide is just a binary "can access/no access", which is pretty simplistic. On an intranet, for example, all users can access all apps, and the really important question is really *what* that user...]]> Thu, 08 Mar 2007 10:36:18 -0500 Thu, 08 Mar 2007 10:36:18 -0500 Thu, 08 Mar 2007 10:36:18 -0500 Mar 8, 2007 Remi Vankeisbelck 0 http://www.theserverside.com/discussions/thread.tss?thread_id=44530 One is our API, which will solve the problem, but will also lock you into a vendor specific model.

The second approach is through header injection, which is similar what you mention below. ...]]> Thu, 08 Mar 2007 10:09:24 -0500 Thu, 08 Mar 2007 10:09:24 -0500 Thu, 08 Mar 2007 10:09:24 -0500 Mar 8, 2007 Rickard Oberg 0 http://www.theserverside.com/discussions/thread.tss?thread_id=44530 Thu, 08 Mar 2007 09:56:34 -0500 Thu, 08 Mar 2007 09:56:34 -0500 Thu, 08 Mar 2007 09:56:34 -0500 Mar 8, 2007 Suneet Shah 1 http://www.theserverside.com/discussions/thread.tss?thread_id=44530 Thu, 08 Mar 2007 09:46:35 -0500 Thu, 08 Mar 2007 09:46:35 -0500 Thu, 08 Mar 2007 09:46:35 -0500 Mar 8, 2007 Suneet Shah 3 http://www.theserverside.com/discussions/thread.tss?thread_id=44530 The Access Manager does support groups and roles and the ability to define no trivial policies around these roles. In addition to the normal CRUD type of privileges that you may assign to a resource and role, you can also define policies...]]> Thu, 08 Mar 2007 09:35:39 -0500 Thu, 08 Mar 2007 09:35:39 -0500 Thu, 08 Mar 2007 09:35:39 -0500 Mar 8, 2007 Rickard Oberg 3