· Java open single sign-on project-Introduction

Document directory

• What is josso?
• Pluggable framework
• Multi-platform Single Sign-on
• Reverse Proxy Support
• Standard based

What is josso?

Josso, or Java Open Single Sign-On, is an open source J2EE-based SSO infrastructure aimed to provide a solution for centralized platform neutral user authentication.

Pluggable framework

The pluggable framework allows to implement and combine multiple authentication schemes with credential stores.

An authentication scheme is a security mechanisms used to verify user identity based on his credentials. Sample authentication schemes are username/password authentication or certificate based authentication.

Credential stores are repositories for user credentials to be used during the user authentication transaction

You cocould configure josso to use for example certificate-based authentication scheme obtaining user X.509 certificates from a database using JDBC.

Multi-platform Single Sign-on

Josso uses Web Services for asserting user identity, allowing the integration of non-Java applications (I. e: PHP, Microsoft ASP, etc .) to the Single Sign-On service using the soap over HTTP protocol.

Reverse Proxy Support

Josso comes with a reverse proxy component that can be used to create n-tier Single Sign-On deployments.

Standard based

• Josso security infrastructure is based on JAAS (Java authentication and authorization Service)
• Josso uses Web services Implementing axis as the distributed infrastructure.
• Josso uses STRUTS and JSP standards