What Else Does OpenSSO Enterprise Offer?

OpenSSO Enterprise allows for:

• Ease of Deployment: OpenSSO Enterprise is delivered as a web archive (WAR) that can be easily deployed as a Java EE application in different web containers. Most configuration files and required libraries are inside the WAR to avoid the manipulation of the classpath in the web container's configuration file. The OpenSSO Enterprise WAR is supported on:

  1. Sun Java System Web Server 7.0 — Update 3 and above

  2. Sun Java System Application Server 9.1 EE Update 2 and above (and Glassfish v2 update 2 and above)

  3. BEA WebLogic Application Server 9.2 mp2

  4. IBM WebSphere Application Server 6.1

  5. Oracle Application Server 10g

  6. JBoss 4.2.x

  7. Tomcat 5.5.x & 6.x

     ---

     Note –

     Tomcat 5.5.26 and 6.15 are not supported.

     ---

  8. Geronimo (supported on the Sun Solaris^TM 10 Operating Environment for SPARC, x86 & x64 and the Sun Solaris 9 Operating Environment for SPARC & x86 systems only)

     ---

     Note –

     Geronimo can install Tomcat and Jetty web containers; OpenSSO Enterprise supports only Tomcat.

     ---

  See the Sun OpenSSO Enterprise 8.0 Release Notes for updates to this list.

• Portability: OpenSSO Enterprise is supported on the following operating systems:

  1. Sun Solaris 10 Operating Environment for SPARC, x86 & x64 systems

  2. Sun Solaris 9 Operating Environment for SPARC & x86 systems

  3. Windows Server 2003 and Windows XP (development only) operating systems

  4. Red Hat Enterprise Linux 4 Server (Base)

  5. Red Hat Enterprise Linux 4 Advanced Platform

  6. Red Hat Enterprise Linux 5 Server (Base)

  7. Red Hat Enterprise Linux 5 Advanced Platform

  8. Windows 2003 Standard Server

  9. Windows 2003 Enterprise Server

  10. Windows 2003 Datacenter Server

  11. Windows Vista

  12. IBM AIX 5.3 (supported with the IBM WebSphere Application Server 6.1 container only)

  See the Sun OpenSSO Enterprise 8.0 Release Notes for updates to this list.

• Open Standards: OpenSSO Enterprise is built using open standards and specifications as far as possible. For example, features designed for federation management and web services security are based on the Security Assertion Markup Language (SAML), the Liberty Alliance Project specifications, and the WS-Security standards.

• Ease of Administration: OpenSSO Enterprise contains a web-based, graphical administration console as well as command line interfaces for configuration tasks and administrative operations. Additionally, an embedded, centralized data store allows for one place to store server and agent configuration data.

• Security:

  1. Runtime security enables an enterprise's resources to be protected as configured and OpenSSO Enterprise services to be accessed by authorized entities only.

  2. Administration security ensures only authorized updates are made to the OpenSSO Enterprise configuration data.

  3. Deployment security implements best practices for installing OpenSSO Enterprise on different operating systems, web containers, and so forth.

  Additionally, all security actions are logged.

• Configuration Data Store: OpenSSO Enterprise can write server configuration data to a centralized configuration data store. You can also point to instances of Sun Java System Directory Server 5.2 or Directory Server Enterprise Edition 6.x during configuration of OpenSSO Enterprise for use as a configuration data store. See Data and Data Stores for more information.

• User Data Store Independence: OpenSSO Enterprise allows you to view and retrieve user information without making changes to an existing user database. Supported directory servers include Directory Server 5.1, 5.2 & 6.2, IBM Tivoli Directory 6.1, and Microsoft Active Directory 2003. See Data and Data Stores for more information.

  ---

  Caution –

  The configuration data store embedded with OpenSSO Enterprise should only be used as a user data store for proof of concepts and deployments in development.

  ---

• Web and Non-Web-Based Resources: The core design of OpenSSO Enterprise caters to SSO for both web and non-web applications.

• Performance, Scalability and Availability: OpenSSO Enterprise can be scaled horizontally and vertically to handle increased workloads, and as security needs change over time. There is no single point of failure.

• Distributed Architecture Server and client components can be deployed across the enterprise or across domain boundaries as all application programming interfaces (API) provide remote access to OpenSSO Enterprise based on a service-oriented architecture.

• Flexibility and Extensibility: Many OpenSSO Enterprise services expose a service provider interface (SPI) allowing expansion of the framework to provide for specific deployment needs.

• Internationalization OpenSSO Enterprise contains a framework for multiple language support. Customer facing messages, API, command line interfaces, and user interfaces are localized in the supported languages.