Sun's new Access Manager is now OpenSSO Enterprise Felix Gaehtgens of Kuppinger Cole gives some in-depth info on OpenSSO Enterprise 8.0 (registration required). (tags: federation identity saml opensso accessmanager kuppingercole felixgaehtgens sun )

Another entry from the 'While-I-was-on-vacation' department... Video from my JavaPolis ID-WSF 2.0 session was posted at Parleys.com . This is the third and final session I did at JavaPolis last year, the previous two covering OpenSSO and SAML 2.0 . There's also a short report from the JavaPolis 2007 Speaker and JUG Dinner - you can catch a couple of glimpses of me enjoying the JavaPolis hospitality, though Harold and Alexis get speaking parts...

Linux shop adds Solaris for performance boost Wow - "[...] it turned out that Solaris 10 had a throughput that was 50 times better." (tags: fedora linux solaris solaris10 sun t1000 t2000 ubuntu ) Open Source at Sun Microsystems, 2008 Gartner Analysis. Synopsis: Open source at Sun Microsystems is strong, and Gartner expects an increasing role for open source within its business strategies in coming years. (tags: analysis gartner opensource sun ) BigAdmin Feature Article: Using Kerberos to Authenticate

Tech author Marina Sum over at Sun Developer Network continues her series of interviews ; this time in the hot seat is Daniel Raskin , senior product line manager for access and federation management at Sun. In the interview , Daniel lifts the lid on some of the cool new features coming up in Sun Federated Access Manager 8.0 (and, of course, available NOW in OpenSSO ), including Fedlets , Virtual Federation, the Federation Validator and more. Exciting stuff!

It took quite a while, but by now it is out. Please welcome the Windows CardSpace Information Card extensions for OpenSSO: https://opensso.dev.java.net/source/browse/opensso/extensions/authnicip/ When I started working on this last spring, I was not even hoping to see this released in open source and part of the OpenSSO extensions family in less than a year. It took the goodwill and talent of quite a few people to get this off the ground, but with the public release of this code and the upcoming

From the shameless self-promotion dept... Hot on the heels of her interview with Jamie last week , Marina 's latest subject is... me! Sadly, my suggested title of "Sun's Rising Identity Superstar" was rejected in favor of the far less exciting " OpenSSO , a Thriving Community". Oh well...

Sun Developer Network tech author Marina Sum starts a new series of interviews this week with OpenSSO 's benevolent dictator and Sun's director of engineering for access and federation management , Jamie Nelson (my boss, so I'd better be careful here!). In the interview , Jamie explains how web developers need to consider security, but, at the same time, avoid hard-coding it into their apps. Some great tips and useful links for any web developer - read the article here!

As I just reported over at The Aquarium , Eve and Marina recently published Federated Identity Through the Eyes of the Deployer - what it is, why you might want it and what questions to ask as you architect a federated identity system. As I mentioned on The Aquarium , Eve was a key player in defining XML, SAML and more. What you might not know is that Eve is also a talented musician, shining even when accompanied by those less gifted in the art , such as here, at IIW2006b : Here be the lyrics .

Pat , Ben , and Kim have been talking about the use of password tokens for use with Windows CardSpace. Pat's detailed description of how this could work is quite useful, and can be extended in some interesting ways: 1. Create a single-use password deployment If we change the default WS-Sec username/password token to not only include the username and the password needed to login, but also a newly IdP generated second password that replaces the old one on the RP, we would get a single-use password.

As I just mentioned over at The Aquarium , Marina Sum recently published a short interview with Paul Bryan , in which Paul talks about OpenID , OpenSSO and the fight against phishing and identity theft. OpenSSO participants and regular readers will recognize Paul's name - he was the very first external committer on the OpenSSO project, back in 2006. Paul went on to write the OpenID Extension for OpenSSO ( since deployed at openid.sun.com ) before joining Sun in October 2007. While we were sad to