Yes of course, I'll try to name the most important ones : 1. Josso comes with a custom framework for implementing new authentication schemes (username/password, strong authentication, etc.), new stores (LDAP, etc.), Session stores (memory, database, etc.) among other things. SSO in JOSSO is a "business" itself, not just a Container plugin.
2. Josso is a distributed SSO, which basically splits the SSO infrastructure in a client and server component. All your authentication schemes, stores, etc. are implemented in a potentially remote SSO service component, invoked by thin clients using a lightweight protocol like SOAP. In JBoss, all SSO functionality resides in one single component coupled with Catalina. 3. You can have transparent single sign-on across multiple hosts and web applications, not only for web applications running in the same host. JBoss SSO does not support this. 4. The authentication process is centralized. This means that the mechanisms and resources used to authenticate the user are hidden from the SSO clients by the SSO service. The SSO clients only need to know about a Single Sign-On Session created on user authentication against the SSO service. By only updating the SSO service configuration, you can change how partner web applications authenticate their users, security policies, etc. Also, all auditing logic and related information is in one place. 5. JOSSO is a platform neutral SSO, supporting Java and non-Java SSO clients. Right now PHP is supported. This means that you can share a user session between a PHP and a Java application. 6. JOSSO provides security context, not only to protected web resources, but to public ones. JBoss only provides security context to protected web resources. 7. With JOSSO there is no need to access a protected resources to allow the user authenticate itself. In JBoss the user must access a protected resource for the authentication procedure to work. 8. Custom user properties (ie. email, phone, etc.) can be attached to the Principal in a declarative fashion. This is not supported in JBoss. I hope you get a chance to evaluate JOSSO and let us know about your opinion. Regards, Gianluca. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3853338#3853338 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3853338 ------------------------------------------------------- This SF.Net email is sponsored by: Sybase ASE Linux Express Edition - download now for FREE LinuxWorld Reader's Choice Award Winner for best database on Linux. http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
