IAM project

[Fabio Martelli]

Hi All,
does someone know when should be released VELO 2.0?

I have to start a project of I&AM in October 2009 and I'd like to use
VELO and OpenSSO on it.

At the moment I'm trying to investigate the integration between the
two products.
Do you have anything to suggest me?

Thank you in advance,
F.

[Asaf]

Hey,

I don't see a lot of relationship between SSO and Provisioning, except
provisioning and managing access of the central user repository that
the SSO system is based on,


Try to figure out the architecture, I assume that OpenSSO is dependent
on LDAP, then integrating LDAP with Velo is very simple,



Asaf.

[Fabio Martelli]

Hi Asaf,
first of all thank you for your prompt replay.

On Sep 18, 3:05 pm, Asaf <asaf...@gmail.com> wrote:
> Hey,
>
> I don't see a lot of relationship between SSO and Provisioning, except
> provisioning and managing access of the central user repository that
> the SSO system is based on,

I'd like to implement SSO centralizing authentication on OpenSSO.
Further, I would to develop a source adapter in order to manage
OpenSSO users directly. This could be implemented using OpenSSO API.

>
> Try to figure out the architecture, I assume that OpenSSO is dependent
> on LDAP, then integrating LDAP with Velo is very simple,

Yes, it is dependent on LDAP but, as I've just said above, I would to
perform provisioning on OpenSSO directly without any knowledge about
its back-end.
This is, more or less, the exact behavior of Sun IDM ...

I would to know from you if it is possible to use custom java source
adapters, written ad-hoc. Is there any documentation about this topic?

What about VELO 2.0? Could you give me an estimation about the
delivery date?

Regards,
F.

[Asaf]

> Hi Asaf,
> first of all thank you for your prompt replay.
>
> On Sep 18, 3:05 pm, Asaf <asaf...@gmail.com> wrote:
>
> > Hey,
>
> > I don't see a lot of relationship between SSO and Provisioning, except
> > provisioning and managing access of the central user repository that
> > the SSO system is based on,
>
> I'd like to implement SSO centralizing authentication on OpenSSO.
> Further, I would to develop a source adapter in order to manage
> OpenSSO users directly. This could be implemented using OpenSSO API.
>
>

Sure, this is possible.

>
> > Try to figure out the architecture, I assume that OpenSSO is dependent
> > on LDAP, then integrating LDAP with Velo is very simple,
>
> Yes, it is dependent on LDAP but, as I've just said above, I would to
> perform provisioning on OpenSSO directly without any knowledge about
> its back-end.
> This is, more or less, the exact behavior of Sun IDM ...
>
> I would to know from you if it is possible to use custom java source
> adapters, written ad-hoc. Is there any documentation about this topic?
>

As I mentioned, it is possible, in fact, it's not too complicated:
following are the steps:

1) you just have to extends a parent controller class and then throw
the class into velo.jar,
Here's a skeletal controller to start quickly:
http://docs.safehaus.org/display/VELO10/DG-Skeletal+Controller
Or just take a look at one of the implementations available in Velo
source code under velo/src/main/velo/resource/operationControllers

2) Then navigate in the admin interface to resources->resource types
and press on the "Add new Resource Type" button, add the class name,
the resource type name and you are done.

> What about VELO 2.0? Could you give me an estimation about the
> delivery date?
>

We have completed the design phase of the first modules we will
release a stripped lightweight provisioning engine in about a month+,
This is really going to simplify the development of new controllers
(we change the name to connectors) because it's very lightweight,

Velo2 is going to be very modular, the idea is to release more and
more modules in fast iterations instead of releasing everything at
once,



Thanks,


Asaf.